last executing test programs: 6m42.56790809s ago: executing program 0 (id=278): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0xffffffffffffffff}}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f00000001c0), 0x2000000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_any}]}}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x24040084) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x42, 0x1ff) 6m42.213592598s ago: executing program 0 (id=286): unshare(0x32000600) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x33}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) 6m39.788893305s ago: executing program 0 (id=289): sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x80) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@binder={0x73622a85, 0x0, 0x1}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) 6m39.435969104s ago: executing program 0 (id=292): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./mnt\x00', 0x2000c10, &(0x7f00000000c0)={[{@i_version}, {@abort}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r2, 0x0, 0x0, 0x1001f0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) r4 = syz_open_dev$vbi(0x0, 0x0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r4, 0x80845663, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000, 0x16}]) 6m37.359386653s ago: executing program 0 (id=312): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000000c0), 0x3f, 0x0) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000100)) 6m30.210279348s ago: executing program 0 (id=318): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x22020600) unshare(0x2a020480) 6m29.284418087s ago: executing program 32 (id=318): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100"/13], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x22020600) unshare(0x2a020480) 4m25.984356878s ago: executing program 5 (id=760): r0 = syz_open_procfs(0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000000040)=""/4096, 0x1000, 0x7ffffffffffff8) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) setuid(0xee00) r1 = socket$netlink(0x10, 0x3, 0x6) writev(r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = mq_open(&(0x7f0000000380)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4)I\xf3+[e\x95\x89\x99\xca\x8e\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xf1\xba\x04c\xb3-\xf7R\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1a\x12Z\xe5\xf4H\xf7D\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W@D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00', 0x40, 0x9, 0x0) fcntl$setlease(r3, 0x400, 0x0) mq_open(&(0x7f0000000b40)='eth0\x00\xdd\xad4=2k\xf1\x05\x9b\x91y\xe1;F\xa2\x8df\xe9\x04\x00\x00\x00\x00\x0078z=\x8f\xd5F\xa4AR\xc7\x9f.\xdc\xdb\"A\x16\xd8\x19\xf1lZ\xc8\x93\xda\xf2\xc9\xe8h[u8\xc6\xfa\x9ep\xbe\a\xe2\xf5\xa3Y\x9f\xe1\x04gM\x99K$\r\xf1G\xee\xe1\xbd\x1e\xdf\xe1\x9c\x19\xda\xd3\x94EL\xca\x88\x85Q\x02\xd9L\x90\xeb%/\xb1\xeb\x11uP7\x1f\xd9b\xebF\xf8\x88\xf0\xac.\x94\xfc\v\xb1W\xef~+n\xb1\x9b\x02n]xr\xb3\x80\xbc>\xe8XX\xe6\x12\xf3\xc9\xd5\xf8\xd1\x8d\xcb9\xbf\xb0(<\xeb\x92\x8a\x16\xb7\x11^\xb6\xb7n\xd5\xb5\x00[\xdf\x94\x00\r\x95\x17\xa1h\xf8\x00\x00\x00\"\xa0\x05\xcc^\x90c\xc9}\xb8\ny\xf4\xe1\xb4.\xa4\a\x05\xbb}\x91\xf4C\xf5O\xf1a\x12\b\x86\xa16\xbb}C\xc9\x1d\\\xedD\x14\xb1w\x1e\xa0\xc1E\xb5\xf8\xab\xfb\xd9\x93\xb8vJ\x85p\xb5n\x1b\xe4\xd5g\xae\xe4\xeb\xca\xae\x1bs\xd4\xf0\xc0\xdag\x19R4\xd4\xd4\x04\xfc\x04Zb\xf6\xba\xf8B\xf6YU\xcd\xf2\xdb\xb5\xa2\xda\xdf\x8dD\xef`\x13\x15$\xceq\xd7j\xd7\xe3V\xf2\xa2\x95\xcf\x18T\xf1\xb0\xf3\xf8O', 0x1, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x9}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x404c084) mq_unlink(&(0x7f0000000340)='eth0\x00') 4m25.74636391s ago: executing program 5 (id=754): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x8ab43, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) io_uring_setup(0x63b7, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x5) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x2c, 0x0, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendto$inet6(r3, 0x0, 0x0, 0x40000, 0x0, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000100)=0x3) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4m20.554567693s ago: executing program 5 (id=763): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$loop(0x0, 0xf, 0x58081) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.empty_time\x00', 0x275a, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x8, 0x0) syz_open_procfs(r2, &(0x7f0000000040)='net/igmp\x00') 4m19.187723825s ago: executing program 5 (id=768): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000006c0), r0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf251800000018000180140002"], 0x2c}}, 0x4040) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000580)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000102,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYBLOB="d6d84c0df937ed4a0cd30000f2e9ea9568eab74a46c525dc386983eade0b0ce5f1dd911706cf7d32d7d508d1823b8871e001000000eb4ce0a008f5cdea622fc6675e5486860a752ed0298a948efa72b2c8d8525181644a3124f3544a50f192b98f055ad125fd4674534413c6044136ea5aefac5267e43739626ea9391d8f346c4694f70400000000000000cee1f628d1cec3462830606bb612bfed91181cdc107bb91a2e86de2ad5", @ANYBLOB="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"], 0x12, 0xc49, &(0x7f0000001cc0)="$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") syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}, {@jqfmt_vfsold}]}, 0x4, 0x4fc, &(0x7f0000000fc0)="$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") creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) semctl$SEM_STAT_ANY(0x0, 0x0, 0x14, &(0x7f00000001c0)=""/51) write$binfmt_script(r2, &(0x7f0000000080), 0x208e24b) unlink(&(0x7f0000000180)='./file1\x00') 4m15.055864131s ago: executing program 5 (id=782): getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socket$inet6(0xa, 0x80002, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r3, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) 4m13.93622033s ago: executing program 5 (id=786): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in, 0x0, 0x32}, @in6=@loopback, {0xfffffffffffffffe}, {}, {}, 0x70bd29, 0x0, 0xa, 0x3, 0x0, 0x2f}, [@algo_auth={0x48, 0x1, {{'wp256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xffffffff, 0x70bd28}}]}, 0x154}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x50}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x4}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x8040) 4m13.74887444s ago: executing program 33 (id=786): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {@in, 0x0, 0x32}, @in6=@loopback, {0xfffffffffffffffe}, {}, {}, 0x70bd29, 0x0, 0xa, 0x3, 0x0, 0x2f}, [@algo_auth={0x48, 0x1, {{'wp256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0xffffffff, 0x70bd28}}]}, 0x154}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x50}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x4}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r4, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x8040) 21.524254413s ago: executing program 6 (id=1473): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() syz_mount_image$xfs(&(0x7f0000000040), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000180)={[{@pquota}, {@discard}, {@nolargeio}, {@lazytime}, {@nogrpid}, {@bsdgroups}, {@quota}, {@nolazytime}]}, 0x1, 0x97ee, &(0x7f0000012f40)="$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") sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$exfat(0x0, &(0x7f0000000300)='./bus\x00', 0x448c, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) rename(&(0x7f0000000100)='./bus/file0\x00', &(0x7f0000000080)='./mnt\x00') 17.503495806s ago: executing program 6 (id=1487): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x80002, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x331, 0x2000, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) 13.688021397s ago: executing program 1 (id=1493): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x4924924924924fd, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 11.629728526s ago: executing program 1 (id=1498): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r3, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) 11.612186167s ago: executing program 4 (id=1499): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_TSC(0x1a, 0x3) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r3, 0x0, 0x0, 0x240cc0c5, &(0x7f0000000080)={0xa, 0x4c1f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) read$FUSE(0xffffffffffffffff, &(0x7f0000003f00)={0x2020}, 0x2020) preadv(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0) 10.176310893s ago: executing program 1 (id=1500): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f0000000480)="14f9ea7f", 0x4}], 0x1) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = syz_usb_connect$hid(0x1, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000000000008700cb6f000000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x23c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000400)={0x2c, &(0x7f0000000280)={0x0, 0x21, 0x7, {0x7, 0x0, "3d7da32915"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000000), 0x64, 0x100) syz_usb_control_io(r1, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil) ioctl$HIDIOCSFEATURE(r3, 0xc0404806, &(0x7f0000000080)) 10.147743324s ago: executing program 4 (id=1504): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000300), r0) sendmsg$FOU_CMD_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x4) prlimit64(0x0, 0xe, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xd, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000006800e9782bbd7000ffdbdf250a0000000000000008000500", @ANYRES32=r4], 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004"], 0x48) bpf$PROG_LOAD(0x2, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c8006000100d43f000006000300010000005e5214d7fdbf019bd315e7ee93b1d78a56dbdb3c1ce925ba09f28c58aceea9b78f408cb4195e6724e7f4b358becdcd6b943c0fd74bfefe2f6361aa39362f3f8898379046eb1aedc174fe1ab9df11e38b17a696b4cc3558acadf263df8860bd436b1c3ee6c365b9e8d899f9332ca0dbb33e22850d68528b2c3a59c6d40ce6aefb4eda9e9fb8204444700412fcf4cc8a6bb5ba7da7052ada92"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x192}}, 0x20}}, 0x0) 9.916584517s ago: executing program 2 (id=1505): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xfffffffffffffe1f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc8442, 0x19d) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r4 = fanotify_init(0xf00, 0x1000) fanotify_mark(r4, 0x105, 0x10000839, r3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x842, 0x0) setresuid(0x0, 0x0, 0x0) readv(r4, &(0x7f0000000c40)=[{&(0x7f0000000500)=""/169, 0xffffffa0}], 0x1) 9.052561662s ago: executing program 3 (id=1506): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sched_setscheduler(0x0, 0x2, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r4, 0x201, 0x400000, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x4004}}}, 0x24}}, 0x40) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x9000000) 9.043419972s ago: executing program 4 (id=1507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) 9.042530222s ago: executing program 1 (id=1517): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sched_setscheduler(0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) 7.832629617s ago: executing program 1 (id=1508): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x40814) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) ustat(0x11, &(0x7f0000000600)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r3 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) close(r2) 7.788641519s ago: executing program 3 (id=1509): socket$pppoe(0x18, 0x1, 0x0) socket$pppoe(0x18, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) close(0x4) 5.162492628s ago: executing program 3 (id=1510): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) r5 = accept4$netrom(r0, 0x0, 0x0, 0x0) ioctl$sock_netrom_SIOCADDRT(r5, 0x890b, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x70bd2c, 0x1000000, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x37}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 5.060741323s ago: executing program 4 (id=1511): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r4 = fcntl$dupfd(r3, 0x406, r3) write$cgroup_pid(r4, &(0x7f0000000240), 0xb375) 5.034702304s ago: executing program 2 (id=1512): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x40814) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) ustat(0x11, &(0x7f0000000600)) 4.991419477s ago: executing program 6 (id=1513): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb7", 0x85}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29de8d9d", 0xd1}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f8", 0x59}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede33131", 0x93}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c800a837a0236309d25e82d5767d8df7512b2beb324c2a2fd6f4ed3a3eb7396f02d515396a3be574d721df257dbf0bc39c617c69458d721eb85d0e5372751cd23cc88571", 0x9c}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000ac0)="3eb85e3024a2953147f5444738e1388e15fef01893884c2eeb5c559f4a030ee6b08fca1e38ee56dac9cbbea3d6d43e34d9daf81d45289d2bc841e2c4c7072582b15ce7ff3e22b0f19d8a2643280daeb9791b2d0f9b216a0fda4f30804b739da3cce1691d6d88ff52d3e43b26d935d69e99673e", 0x73}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91566b7f1725f39f", 0x1c}], 0x3, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x90}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)}], 0x1}}], 0x3, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.848558464s ago: executing program 6 (id=1514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x18}], 0x4924924924924fd, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.846848055s ago: executing program 2 (id=1525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x80002, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r2, 0x331, 0x2000, 0x40000000, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) 3.995890699s ago: executing program 4 (id=1515): syz_mount_image$exfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x3408b1, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRES32=0x0], 0x1, 0x1516, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x6, 0x0, &(0x7f0000000000)) r3 = socket$inet6(0xa, 0x802, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0xf, 0x2, 0x0, 0x0, @binary="5eddc49329c010370b651f"}]}, 0x34}}, 0x0) connect$inet6(r3, 0x0, 0x0) 3.980764s ago: executing program 2 (id=1516): timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setreuid(0xffffffffffffffff, 0xee01) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(r4, 0x5, 0x0, 0x0) 3.958778641s ago: executing program 3 (id=1518): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) 3.312726085s ago: executing program 3 (id=1519): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sched_setscheduler(0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) 2.211098604s ago: executing program 6 (id=1520): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40080, 0x0) socket(0x10, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8001, 0x0) socket(0x40000000015, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x0, @local}, {0x2, 0x4e23, @local}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x6}) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 2.203580104s ago: executing program 4 (id=1531): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0x0, 0x10}, {0xfff1}}}, 0x24}}, 0x0) 2.201348074s ago: executing program 1 (id=1532): sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x40814) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) ustat(0x11, &(0x7f0000000600)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r3 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4) connect$can_bcm(r3, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) close(r2) 2.133597558s ago: executing program 2 (id=1521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) prlimit64(r0, 0xf, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x80) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f0000000080)='./cgroup/../file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) 14.064379ms ago: executing program 6 (id=1522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r7, r4, 0x25, 0x0, @val=@tcx={@void, @value=r7}}, 0x1c) syz_emit_ethernet(0x22, &(0x7f00000016c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x30}, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x3, 0x14, 0x66, 0x0, 0xf2, 0x73, 0x0, @empty, @local}}}}}, 0x0) 11.03409ms ago: executing program 2 (id=1535): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x11, 0x3, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002b80), 0x0, 0x0, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x9102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000a00)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x4, 0x7fffffff, 0x6361, 0x5, 0x7, 0x403}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x101}}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200591c14000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xee19}], 0x1}, 0x0) 0s ago: executing program 3 (id=1536): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) sched_setscheduler(0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r3, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {}, 0x2000000000001005, 0x19dff}}}, 0x90) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): ly 0 port 6081 - 0 [ 53.299088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.308583][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.317241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.326454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.335684][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.344416][ T4184] device veth1_macvtap entered promiscuous mode [ 53.365484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.373899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.381846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.390767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.416622][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.428850][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.439409][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.450117][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.461458][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.507449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.518895][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.530449][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.541196][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.551171][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.561802][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.573669][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.596082][ T4185] device veth0_macvtap entered promiscuous mode [ 53.607333][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.616148][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.625314][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.634727][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.643572][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.652143][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.660985][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.669518][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.677599][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 53.687807][ T4190] device veth0_vlan entered promiscuous mode [ 53.696708][ T4185] device veth1_macvtap entered promiscuous mode [ 53.727049][ T4190] device veth1_vlan entered promiscuous mode [ 53.737519][ T4184] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.753240][ T4184] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.762152][ T4184] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.771064][ T4184] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.811246][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.826519][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.838476][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.848946][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.858779][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.869449][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.880719][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.895184][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 53.904003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 53.911937][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.920203][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.928784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.942038][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.950341][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.978271][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.992092][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.000581][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.006164][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.020853][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.031964][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.042305][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.053870][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.064908][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.072881][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.080692][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 54.089554][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.099059][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.106891][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.115897][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.125753][ T4190] device veth0_macvtap entered promiscuous mode [ 54.150710][ T4190] device veth1_macvtap entered promiscuous mode [ 54.162634][ T4185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.171350][ T4185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.180375][ T4185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.189948][ T4185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.223940][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.234958][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.259152][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 54.268755][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 54.277623][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.293116][ T4263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.301026][ T4263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.313991][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.326818][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.337153][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.347846][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.357909][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.369516][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.379454][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 54.390029][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.401925][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 54.423179][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.431020][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.444401][ T4261] Bluetooth: hci3: command 0x040f tx timeout [ 54.453668][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.461616][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.471161][ T4261] Bluetooth: hci2: command 0x040f tx timeout [ 54.471372][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.477398][ T4261] Bluetooth: hci0: command 0x040f tx timeout [ 54.486785][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 54.496952][ T4261] Bluetooth: hci1: command 0x040f tx timeout [ 54.505307][ T4261] Bluetooth: hci4: command 0x040f tx timeout [ 54.506074][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.525792][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.535976][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.548983][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.559006][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.569940][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.580014][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 54.591396][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 54.603875][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 54.625264][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 54.643492][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.656833][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.667126][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.677870][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.687467][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 54.757750][ T300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.787124][ T300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.798869][ T1223] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 54.810687][ T1223] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 54.837803][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 54.849840][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.010387][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.065785][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.621545][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 55.696082][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.762489][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.813550][ T4263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.854735][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 55.864517][ T4263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.874257][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 56.542855][ T4262] Bluetooth: hci4: command 0x0419 tx timeout [ 56.597596][ T4262] Bluetooth: hci1: command 0x0419 tx timeout [ 56.676064][ T4262] Bluetooth: hci0: command 0x0419 tx timeout [ 57.005629][ T4262] Bluetooth: hci2: command 0x0419 tx timeout [ 57.011739][ T4262] Bluetooth: hci3: command 0x0419 tx timeout [ 57.162260][ T4306] capability: warning: `syz.2.13' uses 32-bit capabilities (legacy support in use) [ 60.374503][ T4329] device bridge0 entered promiscuous mode [ 60.381557][ T4329] bridge0: port 3(macvlan2) entered blocking state [ 60.388189][ T4329] bridge0: port 3(macvlan2) entered disabled state [ 60.407989][ T4329] device bridge0 left promiscuous mode [ 60.958338][ T4339] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 62.523505][ T4363] bridge0: port 3(vlan2) entered blocking state [ 62.540061][ T4363] bridge0: port 3(vlan2) entered disabled state [ 62.548178][ T4363] device vlan2 entered promiscuous mode [ 62.591401][ T4368] Zero length message leads to an empty skb [ 63.107645][ T4264] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 63.363446][ T4369] loop0: detected capacity change from 0 to 131072 [ 63.435544][ T4376] loop1: detected capacity change from 0 to 512 [ 63.441493][ T4343] ODEBUG: Out of memory. ODEBUG disabled [ 63.451478][ T4369] F2FS-fs (loop0): Wrong CP boundary, start(512) end(1536) blocks(0) [ 63.459890][ T4369] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 63.471505][ T4369] F2FS-fs (loop0): invalid crc value [ 63.522754][ T4369] F2FS-fs (loop0): Found nat_bits in checkpoint [ 63.540653][ T4376] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 63.638675][ T4369] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 63.639963][ T4376] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 63.645982][ T4369] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 63.665187][ T4376] EXT4-fs (loop1): orphan cleanup on readonly fs [ 63.739208][ T4385] netlink: 'syz.4.34': attribute type 33 has an invalid length. [ 63.781208][ T4385] netlink: 152 bytes leftover after parsing attributes in process `syz.4.34'. [ 63.797810][ T4376] Quota error (device loop1): v2_read_file_info: Block with free entry too big (4294967071 >= 6). [ 63.872903][ T4376] EXT4-fs warning (device loop1): ext4_enable_quotas:6488: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 63.912655][ T4264] usb 3-1: device descriptor read/all, error -71 [ 63.922604][ T4376] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 63.968411][ T4376] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.32: bg 0: block 15: invalid block bitmap [ 64.003894][ T4376] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 64.052401][ T4376] EXT4-fs (loop1): 1 truncate cleaned up [ 64.067532][ T4376] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 66.895345][ T4414] loop4: detected capacity change from 0 to 512 [ 66.944661][ T4414] FAT-fs (loop4): bogus number of FAT sectors [ 66.950946][ T4414] FAT-fs (loop4): Can't find a valid FAT filesystem [ 66.998269][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 67.091186][ T4420] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 67.373185][ T23] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 67.418313][ T23] usb 3-1: config 1 has no interface number 0 [ 67.509478][ T23] usb 3-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0xDB, skipping [ 67.650255][ T23] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 67.982752][ T23] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 68.073357][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.081423][ T23] usb 3-1: Product: syz [ 68.087867][ T23] usb 3-1: Manufacturer: syz [ 68.093208][ T23] usb 3-1: SerialNumber: syz [ 68.114687][ T4435] loop7: detected capacity change from 0 to 7 [ 68.124201][ T4408] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 68.135983][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.147147][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 68.150095][ T23] usb 3-1: Expected 3 endpoints, found: 2 [ 68.169410][ T4437] syz.1.48 sent an empty control message without MSG_MORE. [ 68.177192][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.188117][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 68.221827][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.232690][ T4432] pit: kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 68.235542][ T4432] pit: kvm: requested 16761 ns i8254 timer period limited to 200000 ns [ 68.241007][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 68.252954][ T4440] device syzkaller0 entered promiscuous mode [ 68.263093][ T4432] pit: kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 68.272361][ T4432] pit: kvm: requested 122361 ns i8254 timer period limited to 200000 ns [ 68.272603][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.281787][ T4432] pit: kvm: requested 113142 ns i8254 timer period limited to 200000 ns [ 68.292055][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 68.303159][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.311722][ T4432] pit: kvm: requested 110628 ns i8254 timer period limited to 200000 ns [ 68.320937][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 68.334361][ T4432] pit: kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 68.337897][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.345966][ T4432] pit: kvm: requested 122361 ns i8254 timer period limited to 200000 ns [ 68.356229][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 68.364116][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.383178][ T4432] pit: kvm: requested 113142 ns i8254 timer period limited to 200000 ns [ 68.383389][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 68.400198][ T4432] pit: kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 68.402977][ T4176] ldm_validate_partition_table(): Disk read failed. [ 68.426006][ C0] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.437214][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 68.445335][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.456418][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 68.467555][ C1] blk_update_request: I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 68.478615][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 68.487215][ T4176] Dev loop7: unable to read RDB block 0 [ 68.494895][ T4176] loop7: unable to read partition table [ 68.500936][ T4176] loop7: partition table beyond EOD, truncated [ 68.537661][ T4435] ldm_validate_partition_table(): Disk read failed. [ 68.565094][ T4435] Dev loop7: unable to read RDB block 0 [ 68.571357][ T4435] loop7: unable to read partition table [ 68.583045][ T4435] loop7: partition table beyond EOD, truncated [ 68.603943][ T4435] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 69.700041][ T4264] usb 3-1: USB disconnect, device number 4 [ 71.275791][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.282334][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.333632][ T4469] loop3: detected capacity change from 0 to 512 [ 71.424364][ T4469] EXT4-fs (loop3): 1 truncate cleaned up [ 71.430065][ T4469] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,max_dir_size_kb=0x0000000000000001,jqfmt=vfsv1,noload,errors=remount-ro,usrjquota=,. Quota mode: none. [ 71.870610][ T4489] loop1: detected capacity change from 0 to 32768 [ 72.324135][ T4498] loop3: detected capacity change from 0 to 256 [ 72.444124][ T4489] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.67 (4489) [ 72.458634][ T4498] ======================================================= [ 72.458634][ T4498] WARNING: The mand mount option has been deprecated and [ 72.458634][ T4498] and is ignored by this kernel. Remove the mand [ 72.458634][ T4498] option from the mount to silence this warning. [ 72.458634][ T4498] ======================================================= [ 72.522412][ T4498] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.537565][ T4489] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 72.546634][ T4489] BTRFS info (device loop1): enabling disk space caching [ 72.553727][ T4489] BTRFS info (device loop1): force clearing of disk cache [ 72.561123][ T4489] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 72.570796][ T4489] BTRFS info (device loop1): use zstd compression, level 3 [ 72.578065][ T4489] BTRFS info (device loop1): disk space caching is enabled [ 72.585297][ T4489] BTRFS info (device loop1): has skinny extents [ 72.610054][ T4498] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 72.642742][ T4498] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 72.768836][ T4262] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.966387][ T4528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.73'. [ 73.015358][ T4489] BTRFS info (device loop1): enabling ssd optimizations [ 73.031328][ T4489] BTRFS info (device loop1): clearing free space tree [ 73.038956][ T4489] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 73.049063][ T4489] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 73.332867][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 74.630650][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.397863][ T4551] loop4: detected capacity change from 0 to 262144 [ 76.406134][ T4560] netlink: 'syz.1.78': attribute type 8 has an invalid length. [ 76.752442][ C0] sched: RT throttling activated [ 76.754267][ T7] cfg80211: failed to load regulatory.db [ 76.774561][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.828031][ T4264] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.915063][ T4551] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 scanned by syz.4.79 (4551) [ 76.987696][ T4551] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 76.997854][ T4551] BTRFS info (device loop4): using free space tree [ 77.005501][ T4551] BTRFS info (device loop4): has skinny extents [ 77.011765][ T4551] BTRFS info (device loop4): flagging fs with big metadata feature [ 77.023223][ T4563] netlink: 56 bytes leftover after parsing attributes in process `syz.2.81'. [ 77.032729][ T4553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.601353][ T4596] tipc: Failed to remove unknown binding: 66,0,0/0:1538385936/1538385938 [ 77.610844][ T4596] tipc: Failed to remove unknown binding: 66,0,0/0:1538385936/1538385937 [ 77.621338][ T4596] tipc: Failed to remove unknown binding: 66,0,0/0:1538385936/1538385938 [ 77.630247][ T4596] tipc: Failed to remove unknown binding: 66,0,0/0:1538385936/1538385937 [ 77.643083][ T4551] BTRFS info (device loop4): enabling ssd optimizations [ 77.654722][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.249024][ T4553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.410537][ T4553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.423898][ T4217] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.675581][ T4632] process 'syz.0.91' launched './file0' with NULL argv: empty string added [ 80.478006][ T4620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.536682][ T4553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.680256][ T4620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.813186][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.031460][ T4612] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.039786][ T4612] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.811250][ T4612] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.854281][ T4554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.865399][ T4612] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.053247][ T4663] tipc: Failed to remove unknown binding: 66,0,0/0:689428606/689428607 [ 83.063450][ T4663] tipc: Failed to remove unknown binding: 66,0,0/0:689428606/689428607 [ 83.402955][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.999268][ T4554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.999313][ T4612] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.019843][ T4612] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.028997][ T4612] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.038080][ T4612] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.048807][ T4620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.143755][ T4640] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'. [ 84.154959][ T4612] syz.3.87 (4612) used greatest stack depth: 19992 bytes left [ 84.175626][ T4654] netlink: 'syz.4.95': attribute type 10 has an invalid length. [ 84.196300][ T4660] netlink: 'syz.2.99': attribute type 1 has an invalid length. [ 84.220586][ T4661] device gretap1 entered promiscuous mode [ 84.331543][ T4675] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 85.579108][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.668790][ T4624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.677148][ T4620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.102885][ T4698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.112077][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.695044][ T4697] syz.3.107 (4697) used greatest stack depth: 17808 bytes left [ 86.970467][ T23] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.044050][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 88.059604][ T26] audit: type=1326 audit(1777045744.431:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4713 comm="syz.2.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15d09cdd9 code=0x7ffc0000 [ 88.161159][ T4712] tipc: Started in network mode [ 88.166425][ T26] audit: type=1326 audit(1777045744.441:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4713 comm="syz.2.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15d09cdd9 code=0x7ffc0000 [ 88.190704][ T4712] tipc: Node identity 421fbfd061a, cluster identity 4711 [ 88.213584][ T26] audit: type=1326 audit(1777045744.591:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4713 comm="syz.2.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15d09cdd9 code=0x7ffc0000 [ 88.244974][ T4712] tipc: Enabled bearer , priority 0 [ 88.282118][ T4711] tipc: Disabling bearer [ 88.291193][ T26] audit: type=1326 audit(1777045744.591:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4713 comm="syz.2.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15d09cdd9 code=0x7ffc0000 [ 88.388808][ T4725] capability: warning: `syz.4.117' uses deprecated v2 capabilities in a way that may be insecure [ 89.557154][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.601971][ T4715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.610475][ T4624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.619545][ T26] audit: type=1326 audit(1777045744.691:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4713 comm="syz.2.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15d09cdd9 code=0x7ffc0000 [ 89.648673][ T4715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.679101][ T4715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.683105][ T4734] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 89.687592][ T26] audit: type=1326 audit(1777045744.611:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4713 comm="syz.2.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fa15d09cdd9 code=0x7ffc0000 [ 89.718732][ T26] audit: type=1326 audit(1777045744.691:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4713 comm="syz.2.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa15d09cb42 code=0x7ffc0000 [ 89.744831][ T4715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.758094][ T4715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.759580][ T4734] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 89.785230][ T26] audit: type=1326 audit(1777045744.691:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4713 comm="syz.2.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15d09cdd9 code=0x7ffc0000 [ 89.812237][ T4715] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.837452][ T4724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 89.839627][ T26] audit: type=1326 audit(1777045744.691:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4713 comm="syz.2.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa15d09cdd9 code=0x7ffc0000 [ 89.868720][ T26] audit: type=1326 audit(1777045744.691:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4713 comm="syz.2.115" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa15d09cbd7 code=0x7ffc0000 [ 89.886508][ T4724] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 90.196206][ T4744] netlink: 2 bytes leftover after parsing attributes in process `syz.4.122'. [ 90.212742][ T4744] netlink: 2 bytes leftover after parsing attributes in process `syz.4.122'. [ 90.224133][ T4744] netlink: 2 bytes leftover after parsing attributes in process `syz.4.122'. [ 90.236023][ T4744] netlink: 2 bytes leftover after parsing attributes in process `syz.4.122'. [ 90.247273][ T4744] netlink: 2 bytes leftover after parsing attributes in process `syz.4.122'. [ 90.259318][ T4744] netlink: 2 bytes leftover after parsing attributes in process `syz.4.122'. [ 90.270722][ T4744] netlink: 2 bytes leftover after parsing attributes in process `syz.4.122'. [ 90.282001][ T4744] netlink: 2 bytes leftover after parsing attributes in process `syz.4.122'. [ 90.293470][ T4744] netlink: 2 bytes leftover after parsing attributes in process `syz.4.122'. [ 90.304344][ T4744] netlink: 2 bytes leftover after parsing attributes in process `syz.4.122'. [ 90.868857][ T4753] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.956453][ T4755] loop0: detected capacity change from 0 to 512 [ 91.010180][ T4755] FAT-fs (loop0): Unrecognized mount option "/dev/comedi5" or missing value [ 91.216127][ T4766] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 91.216127][ T4766] The task syz.0.126 (4766) triggered the difference, watch for misbehavior. [ 91.252216][ T4759] Cannot find set identified by id 0 to match [ 93.446542][ T4778] device syzkaller0 entered promiscuous mode [ 93.596645][ T4778] tipc: Enabled bearer , priority 0 [ 93.756104][ T4777] tipc: Resetting bearer [ 93.843302][ T4777] tipc: Disabling bearer [ 94.092218][ T4798] Cannot find add_set index 0 as target [ 94.719789][ T4802] tipc: Started in network mode [ 94.740124][ T4802] tipc: Node identity ff020000000000000000000000000001, cluster identity 4711 [ 94.752241][ T4802] tipc: Enabling of bearer rejected, failed to enable media [ 94.765617][ T4556] net_ratelimit: 316 callbacks suppressed [ 94.765631][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 94.922977][ T4624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.849173][ T4554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.752791][ T4624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.761540][ T4624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 96.847592][ T4840] device syzkaller0 entered promiscuous mode [ 96.923039][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.549601][ T4852] PKCS7: Unknown OID: [4] 0.0 [ 97.554731][ T4852] PKCS7: Only support pkcs7_signedData type [ 97.919921][ T4863] cgroup2: Unexpected value for 'memory_localevents' [ 98.029988][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.040306][ T4865] loop2: detected capacity change from 0 to 256 [ 98.162705][ T4865] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 98.292092][ T26] kauditd_printk_skb: 74 callbacks suppressed [ 98.292108][ T26] audit: type=1804 audit(1777045754.661:86): pid=4863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.159" name="/newroot/30/file0/bus" dev="loop2" ino=1048590 res=1 errno=0 [ 100.601782][ T4625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.679124][ T4876] device syzkaller0 entered promiscuous mode [ 100.851092][ T4554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.998102][ T4882] syz.2.162 uses obsolete (PF_INET,SOCK_PACKET) [ 101.884949][ T4553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.605918][ T4918] netlink: 12 bytes leftover after parsing attributes in process `syz.1.176'. [ 103.626085][ T4553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 103.661691][ T4918] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.880049][ T4620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.681020][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.729251][ T4918] device veth3 entered promiscuous mode [ 105.751995][ T4918] bond1: (slave veth3): Enslaving as an active interface with an up link [ 105.875319][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 106.346669][ T4620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.433866][ T4932] loop2: detected capacity change from 0 to 256 [ 106.659658][ T4932] FAT-fs (loop2): Directory bread(block 64) failed [ 106.678082][ T4932] FAT-fs (loop2): Directory bread(block 65) failed [ 106.685366][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.693368][ T4932] FAT-fs (loop2): Directory bread(block 66) failed [ 106.732546][ T4932] FAT-fs (loop2): Directory bread(block 67) failed [ 106.760127][ T4932] FAT-fs (loop2): Directory bread(block 68) failed [ 106.784613][ T4932] FAT-fs (loop2): Directory bread(block 69) failed [ 106.792836][ T4932] FAT-fs (loop2): Directory bread(block 70) failed [ 106.799489][ T4932] FAT-fs (loop2): Directory bread(block 71) failed [ 106.806471][ T4932] FAT-fs (loop2): Directory bread(block 72) failed [ 106.813304][ T4932] FAT-fs (loop2): Directory bread(block 73) failed [ 106.932886][ T4620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 106.962689][ T4958] tipc: Enabled bearer , priority 0 [ 107.085180][ T4958] device syzkaller0 entered promiscuous mode [ 107.765266][ T4556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.950786][ T4956] tipc: Resetting bearer [ 108.022313][ T4956] tipc: Disabling bearer [ 109.194588][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.920624][ T4982] loop2: detected capacity change from 0 to 256 [ 109.964404][ T4620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.001868][ T4989] device syzkaller0 entered promiscuous mode [ 110.024838][ T4982] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 110.336846][ T1107] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.143287][ T4556] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 111.385115][ T4556] usb 2-1: device descriptor read/64, error -71 [ 111.402940][ T4553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.417425][ T5006] device syzkaller0 entered promiscuous mode [ 111.569995][ T4620] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.662626][ T4556] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 111.689542][ T5020] loop2: detected capacity change from 0 to 256 [ 111.739140][ T5020] FAT-fs (loop2): Directory bread(block 64) failed [ 111.745878][ T5020] FAT-fs (loop2): Directory bread(block 65) failed [ 111.752532][ T5020] FAT-fs (loop2): Directory bread(block 66) failed [ 111.759069][ T5020] FAT-fs (loop2): Directory bread(block 67) failed [ 111.765740][ T5020] FAT-fs (loop2): Directory bread(block 68) failed [ 111.772279][ T5020] FAT-fs (loop2): Directory bread(block 69) failed [ 111.778943][ T5020] FAT-fs (loop2): Directory bread(block 70) failed [ 111.785520][ T5020] FAT-fs (loop2): Directory bread(block 71) failed [ 111.792187][ T5020] FAT-fs (loop2): Directory bread(block 72) failed [ 111.799015][ T5020] FAT-fs (loop2): Directory bread(block 73) failed [ 111.882645][ T4556] usb 2-1: device descriptor read/64, error -71 [ 111.963331][ T4553] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 112.002849][ T4556] usb usb2-port1: attempt power cycle [ 112.143265][ T5027] device syzkaller0 entered promiscuous mode [ 112.372305][ T4553] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 112.402632][ T4553] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 112.413959][ T4553] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 113.154710][ T4556] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 113.272019][ T4553] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.314302][ T4553] usb 5-1: config 0 descriptor?? [ 113.322914][ T4554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.402868][ T4556] usb 2-1: device not accepting address 4, error -71 [ 113.482882][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.912380][ T5038] batman_adv: batadv0: Adding interface: dummy0 [ 114.000305][ T5038] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.070044][ T5038] batman_adv: batadv0: Interface activated: dummy0 [ 114.123449][ T4553] ath6kl: Failed to submit usb control message: -71 [ 114.130357][ T4553] ath6kl: unable to send the bmi data to the device: -71 [ 114.205943][ T4553] ath6kl: Unable to send get target info: -71 [ 114.246411][ T4553] ath6kl: Failed to init ath6kl core: -71 [ 114.254870][ T5048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.214'. [ 114.293536][ T4553] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 114.330825][ T4553] usb 5-1: USB disconnect, device number 2 [ 114.410821][ T5048] bridge1: port 1(erspan0) entered blocking state [ 114.430481][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.477804][ T5048] bridge1: port 1(erspan0) entered disabled state [ 114.510957][ T5048] device erspan0 entered promiscuous mode [ 114.919006][ T4624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.242924][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.251764][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.743043][ T4622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.792979][ T4553] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.963900][ T4622] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.972540][ T4624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.147688][ T5070] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.156767][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 118.872028][ T4554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 119.022947][ T5080] loop3: detected capacity change from 0 to 256 [ 119.157516][ T5080] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 119.461536][ T4232] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.305117][ T4554] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 120.487510][ T5095] netlink: 4 bytes leftover after parsing attributes in process `syz.4.228'. [ 120.562713][ T5095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.228'. [ 120.671930][ T5098] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.795450][ T5122] device bridge0 entered promiscuous mode [ 121.802664][ T5122] bridge0: port 4(macvlan2) entered blocking state [ 121.809238][ T5122] bridge0: port 4(macvlan2) entered disabled state [ 121.820115][ T5122] device bridge0 left promiscuous mode [ 121.992554][ T4624] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 122.852716][ T4624] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 122.871473][ T4624] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 123.002754][ T4624] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 123.731035][ T4624] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.809461][ T4624] usb 2-1: config 0 descriptor?? [ 124.272693][ T4624] ath6kl: Failed to submit usb control message: -71 [ 124.275011][ T5163] netlink: 12 bytes leftover after parsing attributes in process `syz.0.249'. [ 124.279537][ T4624] ath6kl: unable to send the bmi data to the device: -71 [ 124.279556][ T4624] ath6kl: Unable to send get target info: -71 [ 124.333176][ T4624] ath6kl: Failed to init ath6kl core: -71 [ 124.355771][ T4624] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 124.372836][ T5163] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.394521][ T4624] usb 2-1: USB disconnect, device number 6 [ 124.443793][ T5165] device veth3 entered promiscuous mode [ 124.459756][ T5165] bond1: (slave veth3): Enslaving as an active interface with an up link [ 124.469721][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 124.688950][ T5174] batman_adv: batadv0: Adding interface: dummy0 [ 124.770651][ T5174] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.363144][ T5174] batman_adv: batadv0: Interface activated: dummy0 [ 126.404175][ T5174] net_ratelimit: 10 callbacks suppressed [ 126.404191][ T5174] batadv0: mtu less than device minimum [ 126.447898][ T5174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.460841][ T5174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.473159][ T5174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.485642][ T5174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.497984][ T5174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.510361][ T5174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.522760][ T5174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.535074][ T5174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 126.547547][ T5174] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 128.155795][ T5213] loop2: detected capacity change from 0 to 256 [ 128.201168][ T5213] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 128.420863][ T5213] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 128.993490][ T5213] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 130.606277][ T5252] SET target dimension over the limit! [ 131.655570][ T5256] loop3: detected capacity change from 0 to 4096 [ 132.825192][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.831562][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.111910][ T5289] binder: 5288:5289 ioctl c0385868 0 returned -22 [ 134.427808][ T5300] loop0: detected capacity change from 0 to 128 [ 134.723993][ T5300] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,abort,,errors=continue. Quota mode: none. [ 134.889776][ T5300] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 135.528104][ T5300] loop_set_status: loop0 () has still dirty pages (nrpages=1) [ 136.425572][ T4188] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /51/mnt/lost+found: directory fails checksum at offset 1024 [ 136.522029][ T4188] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 136.567141][ T4188] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /51/mnt/lost+found: directory fails checksum at offset 1024 [ 138.403016][ T4188] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 138.437514][ T4188] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /51/mnt/lost+found: directory fails checksum at offset 1024 [ 138.487718][ T4624] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 138.556609][ T4188] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 138.694994][ T4188] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /51/mnt/lost+found: directory fails checksum at offset 1024 [ 139.502765][ T4188] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 139.577150][ T4188] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /51/mnt/lost+found: directory fails checksum at offset 1024 [ 139.612592][ T4624] usb 2-1: device descriptor read/all, error -71 [ 139.682911][ T4188] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 141.625439][ T4188] EXT4-fs error: 98 callbacks suppressed [ 141.625461][ T4188] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /51/mnt/lost+found: directory fails checksum at offset 1024 [ 141.728685][ T5366] device syzkaller0 entered promiscuous mode [ 141.768207][ T4188] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 141.834266][ T4188] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /51/mnt/lost+found: directory fails checksum at offset 1024 [ 141.861315][ T4188] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 141.881950][ T4188] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /51/mnt/lost+found: directory fails checksum at offset 1024 [ 141.897733][ T4188] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 141.915504][ T5371] tipc: Failed to remove unknown binding: 66,0,0/0:2225276061/2225276062 [ 141.949512][ T4188] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /51/mnt/lost+found: directory fails checksum at offset 1024 [ 142.002619][ T4188] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 142.031802][ T4188] EXT4-fs error (device loop0): ext4_readdir:223: inode #11: comm syz-executor: path /51/mnt/lost+found: directory fails checksum at offset 1024 [ 142.111033][ T5373] overlayfs: failed to clone lowerpath [ 142.232759][ T4188] EXT4-fs error (device loop0): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 142.333614][ T5382] xt_nat: multiple ranges no longer supported [ 144.162778][ T21] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 144.962722][ T21] usb 4-1: config 0 has no interfaces? [ 144.968657][ T21] usb 4-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 145.508635][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.704020][ T21] usb 4-1: config 0 descriptor?? [ 146.128112][ T21] usb 4-1: USB disconnect, device number 2 [ 146.651202][ T5406] chnl_net:caif_netlink_parms(): no params data found [ 146.922454][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 147.583064][ T4230] Bluetooth: hci3: command 0x0409 tx timeout [ 147.607701][ T5439] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 147.852442][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 147.952441][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 148.145716][ T5406] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.235092][ T5406] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.273210][ T5406] device bridge_slave_0 entered promiscuous mode [ 148.293479][ T5406] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.300747][ T5406] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.309011][ T5406] device bridge_slave_1 entered promiscuous mode [ 148.409480][ T5406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.443796][ T5406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.672458][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 149.120780][ T5458] binder: 5457:5458 ioctl c0306201 200000000440 returned -14 [ 149.137895][ T5406] team0: Port device team_slave_0 added [ 149.160257][ T5406] team0: Port device team_slave_1 added [ 149.245470][ T5406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.255139][ T5406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.291449][ T5406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.332624][ T5406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.349200][ T5406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.383848][ T5406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.643963][ T21] Bluetooth: hci3: command 0x041b tx timeout [ 149.670033][ T5406] device hsr_slave_0 entered promiscuous mode [ 149.716119][ T5406] device hsr_slave_1 entered promiscuous mode [ 149.758715][ T5406] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.798567][ T5406] Cannot create hsr debugfs directory [ 150.044382][ T5406] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 150.081428][ T5406] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 152.552200][ T4229] Bluetooth: hci3: command 0x040f tx timeout [ 153.234297][ T4229] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 153.273782][ T5406] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 153.327178][ T5406] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 153.372905][ T5491] loop2: detected capacity change from 0 to 512 [ 153.419655][ T5491] FAT-fs (loop2): Unrecognized mount option "ch" or missing value [ 153.542786][ T5491] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 153.562051][ T5499] loop1: detected capacity change from 0 to 764 [ 153.789785][ T5499] rock: directory entry would overflow storage [ 153.802297][ T5499] rock: sig=0x4654, size=5, remaining=4 [ 154.314999][ T5406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.422133][ T5406] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.433669][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.456352][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.467804][ T4229] usb 5-1: config 0 has no interfaces? [ 154.473368][ T4229] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 154.482873][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.511131][ T4229] usb 5-1: config 0 descriptor?? [ 154.551144][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.560179][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.569388][ T4288] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.576534][ T4288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.730677][ T4229] Bluetooth: hci3: command 0x0419 tx timeout [ 154.772196][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.802875][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.816048][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.879517][ T5520] ipt_CLUSTERIP: Please specify destination IP [ 154.973107][ T4288] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.980241][ T4288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.209204][ T5519] netlink: 20 bytes leftover after parsing attributes in process `syz.2.354'. [ 155.228794][ T4230] usb 5-1: USB disconnect, device number 3 [ 155.280916][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.332331][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.463548][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.596722][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.693044][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.779886][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.930065][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.997418][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.019623][ T5532] netlink: 16 bytes leftover after parsing attributes in process `syz.2.357'. [ 156.114990][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.273277][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.434390][ T4288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.579743][ T5406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 158.217177][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 158.230732][ T4263] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 158.825890][ T5406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.979116][ T5565] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.365'. [ 161.849820][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 161.859090][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 162.027092][ T5602] loop4: detected capacity change from 0 to 8 [ 162.841845][ T5610] loop3: detected capacity change from 0 to 512 [ 162.977551][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 162.987815][ T5602] SQUASHFS error: xz decompression failed, data probably corrupt [ 162.996081][ T5602] SQUASHFS error: Failed to read block 0x108: -5 [ 163.002544][ T5602] SQUASHFS error: Unable to read metadata cache entry [106] [ 163.010233][ T5602] SQUASHFS error: Unable to read inode 0x11f [ 163.078386][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.113537][ T5610] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 163.142738][ T5406] device veth0_vlan entered promiscuous mode [ 163.149942][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.158337][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.159320][ T5610] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 163.237102][ T5406] device veth1_vlan entered promiscuous mode [ 163.300249][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 163.316429][ T5626] binder: BINDER_SET_CONTEXT_MGR already set [ 163.323979][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 163.350709][ T5406] device veth0_macvtap entered promiscuous mode [ 163.363289][ T5626] binder: 5625:5626 ioctl 4018620d 200000004a80 returned -16 [ 163.384419][ T5610] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.377: corrupted inode contents [ 163.409860][ T5610] EXT4-fs error (device loop3): ext4_dirty_inode:6077: inode #2: comm syz.3.377: mark_inode_dirty error [ 163.430442][ T5610] EXT4-fs error (device loop3): ext4_do_update_inode:5229: inode #2: comm syz.3.377: corrupted inode contents [ 163.458781][ T5610] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz.3.377: mark_inode_dirty error [ 163.544746][ T5406] device veth1_macvtap entered promiscuous mode [ 163.567385][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.578167][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.590423][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.603132][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.664071][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.765544][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.786438][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 163.798775][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.817289][ T5406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 163.826215][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 163.846315][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 163.858555][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 163.873412][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 163.901923][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.915124][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.928311][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 163.967809][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.020702][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.069989][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.079971][ T5406] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 164.094102][ T5406] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.105346][ T5406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.115929][ T5406] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.124832][ T5406] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.137115][ T5406] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.159580][ T5406] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 164.169367][ T5626] binder: 5625:5626 ioctl c0306201 200000000180 returned -14 [ 165.617683][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.663584][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 166.511565][ T4273] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.560344][ T4273] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.630292][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 166.670218][ T5663] netlink: 24 bytes leftover after parsing attributes in process `syz.2.389'. [ 167.050985][ T4288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.100430][ T4288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.654820][ T5680] block device autoloading is deprecated and will be removed. [ 168.072860][ T5669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'. [ 168.113109][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 169.167198][ T21] hid-generic 0004:0004:FFFF0001.0001: unknown main item tag 0x0 [ 169.203053][ T21] hid-generic 0004:0004:FFFF0001.0001: unknown main item tag 0x0 [ 169.246463][ T21] hid-generic 0004:0004:FFFF0001.0001: unknown main item tag 0x0 [ 169.340700][ T21] hid-generic 0004:0004:FFFF0001.0001: hidraw0: HID v0.b3 Device [syz0] on syz1 [ 169.452535][ T4624] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 170.222054][ T5707] loop3: detected capacity change from 0 to 4096 [ 170.258161][ T5705] fido_id[5705]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 170.324924][ T5707] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 170.469235][ T5713] ptrace attach of "./syz-executor exec"[5406] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ \x07    "[5713] [ 171.037294][ T4620] Bluetooth: hci2: command 0x0406 tx timeout [ 171.144153][ T4624] usb 2-1: Using ep0 maxpacket: 32 [ 171.162622][ T4620] Bluetooth: hci4: command 0x0406 tx timeout [ 171.182360][ T4620] Bluetooth: hci1: command 0x0406 tx timeout [ 171.189414][ T4620] Bluetooth: hci0: command 0x0406 tx timeout [ 171.352675][ T4624] usb 2-1: unable to get BOS descriptor or descriptor too short [ 171.622803][ T4624] usb 2-1: New USB device found, idVendor=041e, idProduct=0005, bcdDevice= 0.40 [ 171.634331][ T4624] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.649405][ T4624] usb 2-1: Product: syz [ 171.656278][ T4624] usb 2-1: Manufacturer: syz [ 171.660892][ T4624] usb 2-1: SerialNumber: syz [ 172.247678][ T5707] ntfs3: loop3: ino=5, "/" directory corrupted [ 172.278151][ T5722] net_ratelimit: 10 callbacks suppressed [ 172.278166][ T5722] 0: reclassify loop, rule prio 0, protocol 800 [ 172.281861][ T5725] netlink: 80 bytes leftover after parsing attributes in process `syz.1.405'. [ 172.334654][ T4624] usb 2-1: USB disconnect, device number 9 [ 172.477238][ C0] Unknown status report in ack skb [ 172.684926][ T5730] netlink: 'syz.1.405': attribute type 12 has an invalid length. [ 174.015586][ T5734] loop5: detected capacity change from 0 to 512 [ 174.058374][ T4190] ntfs3: loop3: ntfs_sync_fs r=1a failed, -22. [ 174.339561][ T4190] ntfs3: loop3: ntfs_evict_inode r=1a failed, -22. [ 174.379058][ T4190] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 174.408245][ T5734] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 174.438262][ T5734] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 174.732894][ T4229] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 174.982784][ T4229] usb 5-1: Using ep0 maxpacket: 32 [ 175.079756][ T5734] EXT4-fs (loop5): orphan cleanup on readonly fs [ 175.105394][ T5734] EXT4-fs error (device loop5): ext4_orphan_get:1432: comm syz.5.410: bad orphan inode 267 [ 175.125343][ T5734] EXT4-fs (loop5): Remounting filesystem read-only [ 175.132064][ T5734] EXT4-fs (loop5): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,discard,errors=remount-ro,inode_readahead_blks=0x0000000001000000. Quota mode: none. [ 175.191288][ T5755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.416'. [ 175.201306][ T5755] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.222790][ T4229] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.237370][ T5734] ip6t_srh: unknown srh invflags 4000 [ 175.243935][ T4229] usb 5-1: New USB device found, idVendor=17ef, idProduct=6062, bcdDevice= 0.00 [ 175.253363][ T4229] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.283577][ T4229] usb 5-1: config 0 descriptor?? [ 175.334759][ T4229] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 175.343017][ T5755] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.352359][ T5764] EXT4-fs warning (device loop5): dx_probe:893: inode #2: comm syz.5.410: dx entry: limit 0 != root limit 125 [ 175.387613][ T5764] EXT4-fs warning (device loop5): dx_probe:966: inode #2: comm syz.5.410: Corrupt directory, running e2fsck is recommended [ 175.425482][ T5767] netlink: 4 bytes leftover after parsing attributes in process `syz.2.417'. [ 178.384304][ T4229] usb 5-1: USB disconnect, device number 4 [ 180.213441][ T5824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.433'. [ 182.086648][ T5864] netlink: 'syz.2.446': attribute type 1 has an invalid length. [ 182.184794][ T5864] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.369526][ T5867] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 183.391325][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 183.422603][ T21] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 183.504552][ T5883] netlink: 44 bytes leftover after parsing attributes in process `syz.4.454'. [ 185.626070][ T21] usb 6-1: device not accepting address 2, error -71 [ 185.819811][ T5899] tipc: Started in network mode [ 185.872627][ T5899] tipc: Node identity be7e4d4389e, cluster identity 4711 [ 185.879815][ T5899] tipc: Enabled bearer , priority 0 [ 186.080164][ T5902] device vlan3 entered promiscuous mode [ 186.550537][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.3.460'. [ 186.741835][ T5903] device syzkaller0 entered promiscuous mode [ 186.886410][ T5903] tipc: Resetting bearer [ 186.941825][ T5903] tipc: Disabling bearer [ 187.294174][ T5942] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 187.333901][ T5942] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 190.919812][ T5971] loop3: detected capacity change from 0 to 512 [ 191.428086][ T5971] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.481: bad orphan inode 13 [ 191.446051][ T5971] ext4_test_bit(bit=12, block=4) = 1 [ 191.460213][ T5971] is_bad_inode(inode)=0 [ 191.466174][ T5971] NEXT_ORPHAN(inode)=0 [ 191.474479][ T5971] max_ino=32 [ 191.551026][ T5971] i_nlink=1 [ 191.561651][ T5971] EXT4-fs (loop3): mounted filesystem without journal. Opts: usrjquota=,stripe=0x0000000000000007,,errors=continue. Quota mode: none. [ 192.496309][ T5991] loop5: detected capacity change from 0 to 256 [ 192.647342][ T5993] device vlan2 entered promiscuous mode [ 193.058297][ T5993] device geneve1 entered promiscuous mode [ 193.154655][ T5999] loop5: detected capacity change from 0 to 128 [ 193.172809][ T5999] FAT-fs (loop5): Unrecognized mount option "dmask=00000002k!Óùß•GåÑc0000000000000003" or missing value [ 194.137183][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.147108][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.592497][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 194.622467][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 194.632469][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 194.642461][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 194.652466][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 194.662460][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 194.835366][ T6023] __sock_release: fasync list not empty! [ 197.430515][ T6062] team0: Port device bridge1 added [ 198.941841][ T6078] __sock_release: fasync list not empty! [ 200.163038][ T6107] team0: Port device bridge2 added [ 200.351093][ T6114] netlink: 16 bytes leftover after parsing attributes in process `syz.5.520'. [ 200.424023][ T6115] netlink: 16 bytes leftover after parsing attributes in process `syz.5.520'. [ 203.144985][ T6155] fuse: Bad value for 'fd' [ 204.675046][ T6164] team0: Port device bridge1 added [ 204.897568][ T6174] tipc: Enabled bearer , priority 0 [ 204.914598][ T6174] device syzkaller0 entered promiscuous mode [ 205.793802][ T6174] tipc: Resetting bearer [ 205.835573][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.542'. [ 205.856883][ T6171] tipc: Resetting bearer [ 205.889324][ T6171] tipc: Disabling bearer [ 205.909012][ T6186] device vlan2 entered promiscuous mode [ 205.921392][ T6186] device geneve1 entered promiscuous mode [ 211.855419][ T6260] netlink: 16166 bytes leftover after parsing attributes in process `syz.2.562'. [ 216.323008][ T6314] tipc: Enabling of bearer rejected, failed to enable media [ 218.806469][ T6338] futex_wake_op: syz.1.580 tries to shift op by 144; fix this program [ 218.828486][ T6340] device syzkaller0 entered promiscuous mode [ 220.091986][ T26] audit: type=1326 audit(1777045876.461:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868fec9dd9 code=0x7ffc0000 [ 220.170861][ T26] audit: type=1326 audit(1777045876.461:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868fec9dd9 code=0x7ffc0000 [ 220.193269][ T26] audit: type=1326 audit(1777045876.491:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f868fec9dd9 code=0x7ffc0000 [ 220.226551][ T26] audit: type=1326 audit(1777045876.491:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868fec9dd9 code=0x7ffc0000 [ 220.311984][ T26] audit: type=1326 audit(1777045876.491:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868fec9dd9 code=0x7ffc0000 [ 220.506583][ T26] audit: type=1326 audit(1777045876.491:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f868fec9dd9 code=0x7ffc0000 [ 220.764978][ T6389] netlink: 216 bytes leftover after parsing attributes in process `syz.1.597'. [ 221.687468][ T26] audit: type=1326 audit(1777045876.491:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868fec9dd9 code=0x7ffc0000 [ 221.716597][ T26] audit: type=1326 audit(1777045876.491:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868fec9dd9 code=0x7ffc0000 [ 221.831694][ T26] audit: type=1326 audit(1777045876.491:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f868fec9dd9 code=0x7ffc0000 [ 221.887574][ T26] audit: type=1326 audit(1777045876.491:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6369 comm="syz.1.591" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868fec9dd9 code=0x7ffc0000 [ 223.372062][ T6398] netlink: 'syz.4.601': attribute type 1 has an invalid length. [ 223.522801][ T6398] netlink: 'syz.4.601': attribute type 2 has an invalid length. [ 223.593425][ T6407] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 223.758729][ T6417] netlink: 24 bytes leftover after parsing attributes in process `syz.4.606'. [ 223.897230][ T6424] netlink: 20 bytes leftover after parsing attributes in process `syz.2.603'. [ 224.532825][ T6409] orangefs_mount: mount request failed with -4 [ 225.691926][ T6444] overlayfs: failed to clone upperpath [ 228.135093][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.619'. [ 228.733869][ T6468] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554436, id = 0 [ 228.833851][ T6467] IPVS: stopping master sync thread 6468 ... [ 231.163876][ T6492] hugetlbfs: syz.3.629 (6492): Using mlock ulimits for SHM_HUGETLB is deprecated [ 233.394883][ T6519] device lo entered promiscuous mode [ 233.401542][ T6519] device tunl0 entered promiscuous mode [ 233.408597][ T6519] device gre0 entered promiscuous mode [ 233.414997][ T6519] device gretap0 entered promiscuous mode [ 233.422290][ T6519] device ip_vti0 entered promiscuous mode [ 233.429178][ T6519] device ip6_vti0 entered promiscuous mode [ 233.435887][ T6519] device sit0 entered promiscuous mode [ 233.442215][ T6519] device ip6tnl0 entered promiscuous mode [ 233.448633][ T6519] device ip6gre0 entered promiscuous mode [ 233.455161][ T6519] device syz_tun entered promiscuous mode [ 233.461804][ T6519] device ip6gretap0 entered promiscuous mode [ 233.468541][ T6519] device bridge0 entered promiscuous mode [ 233.475261][ T6519] device vcan0 entered promiscuous mode [ 233.481856][ T6519] device bond0 entered promiscuous mode [ 233.487467][ T6519] device bond_slave_0 entered promiscuous mode [ 233.494380][ T6519] device bond_slave_1 entered promiscuous mode [ 233.501882][ T6519] device team0 entered promiscuous mode [ 233.507793][ T6519] device team_slave_0 entered promiscuous mode [ 233.515179][ T6519] device team_slave_1 entered promiscuous mode [ 233.522189][ T6519] device bridge2 entered promiscuous mode [ 233.529486][ T6519] device dummy0 entered promiscuous mode [ 233.537635][ T6519] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 233.545924][ T6519] device nlmon0 entered promiscuous mode [ 233.552243][ T6519] device caif0 entered promiscuous mode [ 233.558487][ T6519] device batadv0 entered promiscuous mode [ 233.564898][ T6519] device vxcan0 entered promiscuous mode [ 233.571093][ T6519] device vxcan1 entered promiscuous mode [ 233.577375][ T6519] device veth0 entered promiscuous mode [ 233.583780][ T6519] device veth1 entered promiscuous mode [ 233.590145][ T6519] device wg0 entered promiscuous mode [ 233.596335][ T6519] device wg1 entered promiscuous mode [ 233.602417][ T6519] device wg2 entered promiscuous mode [ 233.608495][ T6519] device veth0_to_bridge entered promiscuous mode [ 233.616252][ T6519] device veth1_to_bridge entered promiscuous mode [ 233.623676][ T6519] device veth0_to_bond entered promiscuous mode [ 233.631069][ T6519] device veth1_to_bond entered promiscuous mode [ 233.638778][ T6519] device veth0_to_team entered promiscuous mode [ 233.646511][ T6519] device veth1_to_team entered promiscuous mode [ 233.654013][ T6519] device veth0_to_batadv entered promiscuous mode [ 233.661316][ T6519] device batadv_slave_0 entered promiscuous mode [ 233.668512][ T6519] device veth1_to_batadv entered promiscuous mode [ 233.675731][ T6519] device batadv_slave_1 entered promiscuous mode [ 233.682906][ T6519] device xfrm0 entered promiscuous mode [ 233.689145][ T6519] device veth0_to_hsr entered promiscuous mode [ 233.696420][ T6519] device hsr0 entered promiscuous mode [ 233.702691][ T6519] device veth1_virt_wifi entered promiscuous mode [ 233.710008][ T6519] device veth0_virt_wifi entered promiscuous mode [ 233.717210][ T6519] device virt_wifi0 entered promiscuous mode [ 233.724827][ T6519] device vlan0 entered promiscuous mode [ 233.731789][ T6519] device vlan1 entered promiscuous mode [ 233.738497][ T6519] device macvlan0 entered promiscuous mode [ 233.745011][ T6519] device macvlan1 entered promiscuous mode [ 233.751567][ T6519] device ipvlan0 entered promiscuous mode [ 233.758089][ T6519] device ipvlan1 entered promiscuous mode [ 233.765385][ T6519] device macvtap0 entered promiscuous mode [ 233.771867][ T6519] device macsec0 entered promiscuous mode [ 233.778474][ T6519] device geneve0 entered promiscuous mode [ 233.784902][ T6519] device geneve1 entered promiscuous mode [ 233.791301][ T6519] device netdevsim0 entered promiscuous mode [ 233.797981][ T6519] device netdevsim1 entered promiscuous mode [ 233.804755][ T6519] device netdevsim2 entered promiscuous mode [ 233.811774][ T6519] device netdevsim3 entered promiscuous mode [ 233.819051][ T6519] device wlan0 entered promiscuous mode [ 233.825693][ T6519] device wlan1 entered promiscuous mode [ 233.831951][ T6519] device sit1 entered promiscuous mode [ 233.838137][ T6519] device ip6erspan0 entered promiscuous mode [ 233.844840][ T6519] device bridge1 entered promiscuous mode [ 233.858622][ T6519] device vlan2 entered promiscuous mode [ 233.865458][ T6519] device batadv0.5 entered promiscuous mode [ 234.672023][ T6524] SET target dimension over the limit! [ 235.022069][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.638'. [ 235.197637][ T6520] chnl_net:caif_netlink_parms(): no params data found [ 235.246839][ T6529] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 235.412996][ T6522] syz.5.639 (6522): drop_caches: 2 [ 236.815680][ T6557] netlink: 24 bytes leftover after parsing attributes in process `syz.2.649'. [ 236.926162][ T6563] xt_nat: multiple ranges no longer supported [ 239.237587][ T6585] tipc: Started in network mode [ 239.253212][ T6585] tipc: Node identity 080211000001, cluster identity 4711 [ 239.277974][ T6585] tipc: Enabled bearer , priority 0 [ 239.572231][ T6587] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 243.379662][ T1325] tipc: Node number set to 134418688 [ 244.697949][ T6636] sctp: [Deprecated]: syz.2.674 (pid 6636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 244.697949][ T6636] Use struct sctp_sack_info instead [ 244.753285][ T6640] fuse: Bad value for 'fd' [ 244.768643][ T6641] loop5: detected capacity change from 0 to 128 [ 244.793220][ T6636] sctp: [Deprecated]: syz.2.674 (pid 6636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 244.793220][ T6636] Use struct sctp_sack_info instead [ 244.874617][ T6641] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 244.929725][ T6641] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 245.212530][ T6657] netlink: 277 bytes leftover after parsing attributes in process `syz.1.678'. [ 248.215194][ T6694] overlayfs: failed to clone upperpath [ 249.432256][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz.1.698'. [ 249.448009][ T6713] binder: 6712:6713 ioctl c0306201 2000000007c0 returned -14 [ 250.245166][ T6726] device batadv_slave_1 entered promiscuous mode [ 250.362014][ T6724] device batadv_slave_1 left promiscuous mode [ 251.584982][ T6739] device syzkaller0 entered promiscuous mode [ 258.046727][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.053079][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.351181][ T6829] ip6t_srh: unknown srh invflags 4000 [ 262.424162][ T6838] netlink: 8 bytes leftover after parsing attributes in process `syz.5.732'. [ 262.801901][ T6849] netlink: 'syz.3.735': attribute type 4 has an invalid length. [ 263.472197][ T6861] netlink: 36 bytes leftover after parsing attributes in process `syz.5.736'. [ 264.478507][ T6873] batman_adv: batadv0: Interface deactivated: dummy0 [ 264.519218][ T6873] tipc: Resetting bearer [ 270.243841][ T6931] user requested TSC rate below hardware speed [ 270.256059][ T6931] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 270.265105][ T6931] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 272.548384][ T6962] netlink: 277 bytes leftover after parsing attributes in process `syz.3.761'. [ 273.200098][ T6955] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 273.262136][ T6955] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 273.279681][ T6958] netlink: 14 bytes leftover after parsing attributes in process `syz.1.769'. [ 274.532874][ T6958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 274.664301][ T6958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 274.696478][ T6958] bond0 (unregistering): Released all slaves [ 274.740527][ T4554] bond0 speed is unknown, defaulting to 1000 [ 274.745290][ T6991] loop5: detected capacity change from 0 to 2048 [ 274.761902][ T6955] siw: device registration error -19 [ 274.850177][ T6991] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 274.907774][ T6991] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 276.034287][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 276.034304][ T26] audit: type=1800 audit(1777045928.789:102): pid=6998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.770" name="bus" dev="ramfs" ino=42216 res=0 errno=0 [ 278.381554][ T7038] device ip6gre1 entered promiscuous mode [ 278.814851][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.781'. [ 278.816037][ T5406] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 278.885849][ T5406] UDF-fs: error (device loop5): udf_read_inode: (ino 1317) failed !bh [ 279.311073][ T7056] netlink: 'syz.1.784': attribute type 1 has an invalid length. [ 279.721252][ T7056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.834214][ T4272] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.054488][ T4272] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.120929][ T7068] netlink: 'syz.1.789': attribute type 10 has an invalid length. [ 280.166415][ T7071] netlink: 60 bytes leftover after parsing attributes in process `syz.2.785'. [ 280.814346][ T4272] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.902110][ T7074] openvswitch: netlink: Actions may not be safe on all matching packets [ 281.318190][ T7080] 0: reclassify loop, rule prio 0, protocol 800 [ 281.326031][ T4271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.335404][ T4271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.893795][ T4272] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.945179][ T4930] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 283.085333][ T26] audit: type=1326 audit(1777045935.393:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f8b5ddd9 code=0x7ffc0000 [ 283.494874][ T26] audit: type=1326 audit(1777045935.393:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f8b5ddd9 code=0x7ffc0000 [ 283.577031][ T26] audit: type=1326 audit(1777045935.393:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f44f8b5ddd9 code=0x7ffc0000 [ 283.599768][ T26] audit: type=1326 audit(1777045935.393:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f8b5ddd9 code=0x7ffc0000 [ 283.602259][ T7102] fuse: Bad value for 'fd' [ 283.635402][ T26] audit: type=1326 audit(1777045935.393:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f8b5ddd9 code=0x7ffc0000 [ 283.673029][ T26] audit: type=1326 audit(1777045935.393:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f44f8b5ddd9 code=0x7ffc0000 [ 284.699364][ T7088] chnl_net:caif_netlink_parms(): no params data found [ 284.761847][ T26] audit: type=1326 audit(1777045935.393:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f8b5ddd9 code=0x7ffc0000 [ 284.998221][ T7117] netlink: 12 bytes leftover after parsing attributes in process `syz.3.801'. [ 285.003191][ T26] audit: type=1326 audit(1777045935.393:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f8b5ddd9 code=0x7ffc0000 [ 285.036657][ T4272] tipc: Left network mode [ 285.039256][ T26] audit: type=1326 audit(1777045935.393:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f44f8b5ddd9 code=0x7ffc0000 [ 286.193685][ T1325] Bluetooth: hci3: command 0x0409 tx timeout [ 286.244956][ T26] audit: type=1326 audit(1777045935.393:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7091 comm="syz.4.795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f8b5ddd9 code=0x7ffc0000 [ 286.291311][ T7088] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.376148][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.416276][ T7088] device bridge_slave_0 entered promiscuous mode [ 287.666996][ T7088] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.676748][ T7088] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.723964][ T7088] device bridge_slave_1 entered promiscuous mode [ 287.748914][ T7088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.792716][ T7088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.986255][ T7088] team0: Port device team_slave_0 added [ 288.029472][ T7088] team0: Port device team_slave_1 added [ 288.097922][ T7088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.114046][ T7088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.154831][ T7088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.191059][ T7088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.201991][ T7088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.244337][ T7088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.372179][ T4232] Bluetooth: hci3: command 0x041b tx timeout [ 288.450889][ T7088] device hsr_slave_0 entered promiscuous mode [ 288.458615][ T7088] device hsr_slave_1 entered promiscuous mode [ 288.466279][ T7088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.474246][ T7088] Cannot create hsr debugfs directory [ 288.685977][ T7088] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 288.705599][ T7088] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 288.726773][ T7088] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 288.817392][ T7088] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 290.092078][ T4272] device hsr_slave_0 left promiscuous mode [ 290.169442][ T4272] device hsr_slave_1 left promiscuous mode [ 290.191465][ T7224] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 290.218196][ T7224] CIFS mount error: No usable UNC path provided in device string! [ 290.218196][ T7224] [ 290.228893][ T7224] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 290.764689][ T4624] Bluetooth: hci3: command 0x040f tx timeout [ 290.876295][ T4272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 290.889539][ T4272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 290.950997][ T4272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.977835][ T4272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 291.012554][ T4272] device bridge_slave_1 left promiscuous mode [ 291.053576][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.118321][ T4272] device bridge_slave_0 left promiscuous mode [ 291.282494][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.917429][ T4272] device veth1_macvtap left promiscuous mode [ 291.956623][ T4272] device veth0_macvtap left promiscuous mode [ 291.995841][ T4272] device veth1_vlan left promiscuous mode [ 292.003054][ T4272] device veth0_vlan left promiscuous mode [ 292.271616][ T4272] team0 (unregistering): Port device bridge1 removed [ 292.661412][ T4272] team0 (unregistering): Port device team_slave_1 removed [ 292.687474][ T4272] team0 (unregistering): Port device team_slave_0 removed [ 292.719668][ T4272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.742758][ T4272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.936395][ T4272] bond0 (unregistering): Released all slaves [ 292.990653][ T4232] Bluetooth: hci3: command 0x0419 tx timeout [ 293.144107][ T7088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.160206][ T7088] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.215464][ T7088] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 293.270303][ T7088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 293.308951][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 293.333725][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.352762][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 294.368658][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 294.639422][ T4251] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.646526][ T4251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.159588][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 295.269325][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 295.391231][ T4251] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.398732][ T4251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.417302][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 295.426400][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 295.437145][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 295.604126][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 295.613024][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 295.622427][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 295.631685][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 295.642716][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 295.651773][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 295.660924][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 295.675999][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 295.695309][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 295.716510][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 296.556469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 296.589098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 296.896309][ T7088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.535492][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 300.564974][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 300.586231][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 300.595371][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 300.610689][ T7088] device veth0_vlan entered promiscuous mode [ 300.624404][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 300.688328][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 300.724538][ T7088] device veth1_vlan entered promiscuous mode [ 300.780699][ T7088] device veth0_macvtap entered promiscuous mode [ 300.812476][ T7088] device veth1_macvtap entered promiscuous mode [ 300.890831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 300.904053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 300.936865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 300.946870][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 300.963400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 300.972827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 300.986647][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.009236][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.030884][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.054209][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.074873][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.089257][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.105767][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.123744][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.151756][ T7088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.189108][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 301.233799][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 301.275901][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.488348][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.521650][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.880959][ T7397] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.858'. [ 302.092777][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.108683][ T7088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 302.123992][ T7088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 302.239467][ T7088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 302.252108][ T7088] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.261729][ T7088] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.270712][ T7088] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.279518][ T7088] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.292270][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 302.313300][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 302.602272][ T4251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.610139][ T4251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.668439][ T1223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 302.683693][ T1223] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.718792][ T1223] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.748637][ T4251] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 305.905892][ T7464] print_req_error: 25 callbacks suppressed [ 305.905913][ T7464] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 307.062646][ T7477] tipc: Started in network mode [ 307.091286][ T7477] tipc: Node identity ba9f87acedf9, cluster identity 4711 [ 307.098570][ T7477] tipc: Enabled bearer , priority 0 [ 307.177385][ T7483] device syzkaller0 entered promiscuous mode [ 308.354324][ T4554] tipc: Node number set to 1466337196 [ 308.430343][ T7477] tipc: Resetting bearer [ 308.545899][ T7474] tipc: Resetting bearer [ 308.588973][ T7474] tipc: Disabling bearer [ 308.674016][ T7502] overlayfs: failed to clone upperpath [ 309.257483][ T7512] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 309.851204][ T7512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 309.864676][ T7512] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 309.879997][ T7512] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.892699][ T7512] device bridge_slave_1 left promiscuous mode [ 309.899087][ T7512] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.132619][ T7512] device vlan2 left promiscuous mode [ 310.160818][ T7512] device bridge_slave_0 left promiscuous mode [ 310.187399][ T7512] bond0: (slave bond_slave_0): Releasing backup interface [ 310.203891][ T7512] bond0: (slave bond_slave_1): Releasing backup interface [ 310.262589][ T7512] team0: Port device team_slave_0 removed [ 310.288147][ T7512] team0: Port device team_slave_1 removed [ 310.294891][ T7512] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.303264][ T7512] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.328489][ T7512] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.337931][ T7512] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.359429][ T7512] bridge0: port 3(vlan2) entered disabled state [ 310.375752][ T7512] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 310.460440][ T7526] netlink: 'syz.4.888': attribute type 10 has an invalid length. [ 310.486878][ T7526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.502744][ T7526] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 310.524488][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 312.041726][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.899'. [ 312.168226][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.899'. [ 313.133783][ T7579] tipc: Enabled bearer , priority 0 [ 314.180152][ T7590] device syzkaller0 entered promiscuous mode [ 314.308932][ T4230] tipc: Node number set to 599769040 [ 318.004217][ T7690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.923'. [ 320.660449][ T7690] device bond1 entered promiscuous mode [ 320.679397][ T7690] 8021q: adding VLAN 0 to HW filter on device bond1 [ 321.507422][ T7701] device erspan1 entered promiscuous mode [ 321.513861][ T7701] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 321.534350][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.923'. [ 322.639376][ T7703] bond1 (unregistering): (slave erspan1): Releasing backup interface [ 322.735476][ T7703] device erspan1 left promiscuous mode [ 322.752782][ T7703] bond1 (unregistering): Released all slaves [ 323.060541][ T7742] fuse: Bad value for 'fd' [ 323.986741][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.032700][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.214930][ T7761] create_pit_timer: 10 callbacks suppressed [ 325.214947][ T7761] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 327.754500][ T23] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 328.079379][ T23] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 329.432253][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.945'. [ 331.787793][ T7832] netlink: 399 bytes leftover after parsing attributes in process `syz.2.954'. [ 331.823847][ T7834] netlink: 60 bytes leftover after parsing attributes in process `syz.1.955'. [ 331.893735][ T7834] unsupported nlmsg_type 40 [ 336.110493][ T7885] tipc: Enabling of bearer rejected, already enabled [ 337.075206][ T7897] tipc: Enabling of bearer rejected, failed to enable media [ 337.414290][ T7903] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 338.315087][ T7913] loop6: detected capacity change from 0 to 512 [ 338.507560][ T7913] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 339.233492][ T7913] ext4 filesystem being mounted at /18/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 342.070665][ T7957] tipc: Enabling of bearer rejected, already enabled [ 344.075265][ T7978] netlink: 12 bytes leftover after parsing attributes in process `syz.3.988'. [ 351.232034][ T8049] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 351.277258][ T8049] tipc: Enabling of bearer rejected, already enabled [ 354.211363][ T8102] netlink: 'syz.2.1016': attribute type 2 has an invalid length. [ 354.866054][ T8112] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 354.883131][ T8112] tipc: Enabling of bearer rejected, already enabled [ 354.900004][ T8106] loop6: detected capacity change from 0 to 4096 [ 355.044559][ T8113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1022'. [ 355.283770][ T8106] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,,errors=continue. Quota mode: writeback. [ 356.949543][ T8138] IPVS: rr: FWM 3 0x00000003 - no destination available [ 358.280915][ T8144] orangefs_mount: mount request failed with -4 [ 358.852525][ T8166] ubi31: attaching mtd0 [ 358.873461][ T8166] ubi31: scanning is finished [ 358.878309][ T8166] ubi31: empty MTD device detected [ 359.591101][ T8166] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 361.469104][ T8184] netlink: 'syz.2.1035': attribute type 1 has an invalid length. [ 361.476939][ T8184] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1035'. [ 368.750467][ T8266] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 368.757449][ T8266] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 368.766710][ T8266] vhci_hcd vhci_hcd.0: Device attached [ 369.278921][ T1325] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 369.302613][ T8268] vhci_hcd: connection closed [ 369.307395][ T4273] vhci_hcd: stop threads [ 371.813647][ T4273] vhci_hcd: release socket [ 371.967034][ T4273] vhci_hcd: disconnect device [ 374.606981][ T8306] netlink: 'syz.3.1063': attribute type 10 has an invalid length. [ 374.650158][ T8306] device wlan1 left promiscuous mode [ 374.747051][ T8306] device wlan1 entered promiscuous mode [ 376.381883][ T8306] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 376.409349][ T8314] device lo entered promiscuous mode [ 376.415214][ T8314] device tunl0 entered promiscuous mode [ 376.421435][ T8314] device gre0 entered promiscuous mode [ 376.427498][ T8314] device gretap0 entered promiscuous mode [ 376.433759][ T8314] device erspan0 entered promiscuous mode [ 376.439930][ T8314] device ip_vti0 entered promiscuous mode [ 376.446102][ T8314] device ip6_vti0 entered promiscuous mode [ 376.452361][ T8314] device sit0 entered promiscuous mode [ 376.458301][ T8314] device ip6tnl0 entered promiscuous mode [ 376.464528][ T8314] device ip6gre0 entered promiscuous mode [ 376.470701][ T8314] device syz_tun entered promiscuous mode [ 376.476933][ T8314] device ip6gretap0 entered promiscuous mode [ 376.483353][ T8314] device bridge0 entered promiscuous mode [ 376.489880][ T8314] device vcan0 entered promiscuous mode [ 376.495577][ T8314] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 376.505627][ T8314] device bond0 entered promiscuous mode [ 376.511198][ T8314] device wlan1 entered promiscuous mode [ 376.517715][ T8314] device team0 entered promiscuous mode [ 376.524246][ T8314] device dummy0 entered promiscuous mode [ 376.530723][ T8314] device nlmon0 entered promiscuous mode [ 376.536893][ T8314] device caif0 entered promiscuous mode [ 376.542731][ T8314] device batadv0 entered promiscuous mode [ 376.549109][ T8314] device vxcan0 entered promiscuous mode [ 376.554895][ T8314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 376.562400][ T8314] device vxcan1 entered promiscuous mode [ 376.568170][ T8314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 376.575667][ T8314] device veth0 entered promiscuous mode [ 376.581706][ T8314] device veth1 entered promiscuous mode [ 376.587724][ T8314] device wg0 entered promiscuous mode [ 376.593608][ T8314] device wg1 entered promiscuous mode [ 376.599556][ T8314] device wg2 entered promiscuous mode [ 376.605475][ T8314] device veth0_to_bridge entered promiscuous mode [ 376.612567][ T8314] device bridge_slave_0 entered promiscuous mode [ 376.620186][ T8314] device veth1_to_bridge entered promiscuous mode [ 376.627118][ T8314] device bridge_slave_1 entered promiscuous mode [ 376.634095][ T8314] device veth0_to_bond entered promiscuous mode [ 376.641099][ T8314] device bond_slave_0 entered promiscuous mode [ 376.647441][ T8314] device veth1_to_bond entered promiscuous mode [ 376.654513][ T8314] device bond_slave_1 entered promiscuous mode [ 376.660815][ T8314] device veth0_to_team entered promiscuous mode [ 376.668032][ T8314] device team_slave_0 entered promiscuous mode [ 376.674311][ T8314] device veth1_to_team entered promiscuous mode [ 376.681342][ T8314] device team_slave_1 entered promiscuous mode [ 376.687652][ T8314] device veth0_to_batadv entered promiscuous mode [ 376.694529][ T8314] device batadv_slave_0 entered promiscuous mode [ 376.701370][ T8314] device veth1_to_batadv entered promiscuous mode [ 376.708244][ T8314] device batadv_slave_1 entered promiscuous mode [ 376.715073][ T8314] device xfrm0 entered promiscuous mode [ 376.721113][ T8314] device veth0_to_hsr entered promiscuous mode [ 376.728012][ T8314] device veth1_to_hsr entered promiscuous mode [ 376.734961][ T8314] device hsr0 entered promiscuous mode [ 376.740868][ T8314] device veth1_virt_wifi entered promiscuous mode [ 376.747697][ T8314] device veth0_virt_wifi entered promiscuous mode [ 376.754571][ T8314] device virt_wifi0 entered promiscuous mode [ 376.761531][ T8314] device vlan0 entered promiscuous mode [ 376.767613][ T8314] device vlan1 entered promiscuous mode [ 376.773680][ T8314] device macvlan0 entered promiscuous mode [ 376.779963][ T8314] device macvlan1 entered promiscuous mode [ 376.786287][ T8314] device ipvlan0 entered promiscuous mode [ 376.792114][ T8314] device ipvlan1 entered promiscuous mode [ 376.798674][ T8314] device macvtap0 entered promiscuous mode [ 376.805105][ T8314] device macsec0 entered promiscuous mode [ 376.811335][ T8314] device geneve0 entered promiscuous mode [ 376.817503][ T8314] device geneve1 entered promiscuous mode [ 376.823700][ T8314] device netdevsim0 entered promiscuous mode [ 376.830099][ T8314] device netdevsim1 entered promiscuous mode [ 376.836726][ T8314] device netdevsim2 entered promiscuous mode [ 376.843326][ T8314] device netdevsim3 entered promiscuous mode [ 376.849844][ T8314] device wlan0 entered promiscuous mode [ 376.856248][ T8314] device vlan2 entered promiscuous mode [ 376.861934][ T8314] device dvmrp0 entered promiscuous mode [ 376.867616][ T8314] device bridge1 entered promiscuous mode [ 376.873789][ T8314] device batadv1 entered promiscuous mode [ 376.879609][ T8314] device gre1 entered promiscuous mode [ 376.885146][ T8314] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 376.892434][ T8314] device syztnl1 entered promiscuous mode [ 376.898221][ T8314] device erspan1 entered promiscuous mode [ 376.904096][ T8314] device nicvf0 entered promiscuous mode [ 376.988900][ T4451] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.208187][ T4451] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.020871][ T8342] tipc: Enabling of bearer rejected, failed to enable media [ 378.066242][ T1325] vhci_hcd: vhci_device speed not set [ 378.110983][ T4451] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.134224][ T8350] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1074'. [ 378.265409][ T4451] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.660832][ T4451] tipc: Left network mode [ 382.482316][ T8402] tipc: Enabling of bearer rejected, already enabled [ 383.347744][ T8412] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 384.050431][ T4451] device hsr_slave_0 left promiscuous mode [ 384.057192][ T4451] device hsr_slave_1 left promiscuous mode [ 384.072242][ T4451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 384.088271][ T4451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 384.232706][ T4451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 384.380188][ T4451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.051183][ T4451] device bridge_slave_1 left promiscuous mode [ 385.061937][ T4451] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.153468][ T4451] device bridge_slave_0 left promiscuous mode [ 385.337955][ T4451] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.375828][ T4451] device veth1_macvtap left promiscuous mode [ 385.385102][ T4451] device veth0_macvtap left promiscuous mode [ 385.398547][ T4451] device veth1_vlan left promiscuous mode [ 385.460520][ T8439] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 386.021184][ T4451] device veth0_vlan left promiscuous mode [ 387.074286][ T4451] bond1 (unregistering): (slave veth3): Releasing backup interface [ 387.109529][ T4451] bond1 (unregistering): Released all slaves [ 387.361208][ T4451] team0 (unregistering): Port device team_slave_1 removed [ 387.386555][ T4451] team0 (unregistering): Port device team_slave_0 removed [ 387.414230][ T4451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.438982][ T4451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.573289][ T4451] bond0 (unregistering): Released all slaves [ 388.600548][ T8480] device syzkaller0 entered promiscuous mode [ 390.540833][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 390.557420][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.769833][ T8482] IPVS: Error connecting to the multicast addr [ 390.788147][ T8494] netlink: 'syz.1.1111': attribute type 1 has an invalid length. [ 390.845526][ T8494] 8021q: adding VLAN 0 to HW filter on device bond2 [ 390.925294][ T8496] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 390.934991][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 393.160475][ T8552] xt_nat: multiple ranges no longer supported [ 394.121463][ T8564] loop6: detected capacity change from 0 to 4096 [ 394.224427][ T8572] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 394.721031][ T8564] EXT4-fs (loop6): inline encryption not supported [ 394.755671][ T8564] EXT4-fs (loop6): Test dummy encryption mode enabled [ 394.788059][ T8564] EXT4-fs (loop6): inline encryption not supported [ 394.794907][ T8564] EXT4-fs (loop6): Unrecognized mount option "smackfstransmute=nodelalloc" or missing value [ 394.975594][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1128'. [ 401.212737][ T8680] bond0: (slave wlan1): Releasing backup interface [ 401.240366][ T8680] bond0: Destroying bond [ 402.121275][ T8680] bond0 (unregistering): Released all slaves [ 404.638143][ T8725] overlayfs: failed to clone upperpath [ 405.186667][ T8746] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1166'. [ 405.195709][ T8746] chnl_net:caif_netlink_parms(): no params data found [ 405.256598][ T8748] fuse: Bad value for 'fd' [ 406.237818][ T8763] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 406.350960][ T8763] overlayfs: failed to set xattr on upper [ 406.478168][ T8763] overlayfs: ...falling back to index=off,metacopy=off. [ 407.768434][ T8789] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1177'. [ 412.268295][ T8852] tipc: Failed to remove unknown binding: 66,0,0/1466337196:3564197549/3564197550 [ 412.619227][ T8870] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1192'. [ 412.724093][ T8872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1193'. [ 413.580305][ T8876] device vlan3 entered promiscuous mode [ 413.580485][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 413.780869][ T8880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1207'. [ 414.603984][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1196'. [ 414.788678][ T8893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1197'. [ 416.226968][ T8927] loop6: detected capacity change from 0 to 512 [ 416.674577][ T8927] EXT4-fs (loop6): Test dummy encryption mode enabled [ 416.681742][ T8927] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 416.695182][ T8927] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 418.320252][ T8927] EXT4-fs error (device loop6): ext4_orphan_get:1432: comm syz.6.1216: bad orphan inode 131083 [ 418.334603][ T8927] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none. [ 418.356890][ T8918] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1214'. [ 419.050499][ T8959] overlayfs: failed to clone upperpath [ 421.085242][ T8986] IPVS: stopping master sync thread 8992 ... [ 424.709379][ T8994] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.716614][ T8994] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.014669][ T8994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.995400][ T8994] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.004585][ T8994] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.015086][ T8994] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.026101][ T8994] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.157097][ T9019] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1224'. [ 427.816615][ T9054] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 431.761518][ T9095] IPVS: Error connecting to the multicast addr [ 434.652272][ T9138] device vlan3 entered promiscuous mode [ 435.570081][ T9145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1248'. [ 437.171520][ T9174] netlink: 277 bytes leftover after parsing attributes in process `syz.1.1257'. [ 443.478794][ T9237] overlayfs: failed to clone upperpath [ 445.145143][ T9264] overlayfs: failed to clone upperpath [ 449.186611][ T9304] device syzkaller0 entered promiscuous mode [ 450.637416][ T9341] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1295'. [ 451.024764][ T9348] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1298'. [ 453.849977][ T9383] batman_adv: batadv0: Adding interface: dummy0 [ 453.884064][ T9383] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.961202][ T9383] batman_adv: batadv0: Interface activated: dummy0 [ 454.375047][ T9386] batadv0: mtu less than device minimum [ 454.534833][ T9386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 454.547297][ T9386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 454.559677][ T9386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 454.572075][ T9386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 454.584641][ T9386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 454.597002][ T9386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 454.609462][ T9386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 454.621866][ T9386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 454.634579][ T9386] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 454.693039][ T9395] device syzkaller0 entered promiscuous mode [ 455.094268][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 455.100806][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 455.776489][ T9413] overlayfs: failed to clone upperpath [ 459.520180][ T9455] tipc: Started in network mode [ 459.534937][ T9455] tipc: Node identity 080211000001, cluster identity 4711 [ 459.542418][ T9455] tipc: Enabled bearer , priority 0 [ 460.610066][ T8850] tipc: Node number set to 134418688 [ 466.297345][ T9540] tipc: Enabling of bearer rejected, failed to enable media [ 467.413916][ T9564] device syzkaller0 entered promiscuous mode [ 479.680047][ T9658] loop6: detected capacity change from 0 to 1024 [ 480.536087][ T26] kauditd_printk_skb: 21 callbacks suppressed [ 480.536151][ T26] audit: type=1800 audit(1777046119.892:134): pid=9679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1377" name="file1" dev="loop6" ino=20 res=0 errno=0 [ 485.327340][ T9736] netlink: 'syz.1.1392': attribute type 10 has an invalid length. [ 485.335300][ T9736] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1392'. [ 485.346337][ T9736] device team0 entered promiscuous mode [ 485.352053][ T9736] device team_slave_0 entered promiscuous mode [ 485.360856][ T9736] device team_slave_1 entered promiscuous mode [ 485.368644][ T9736] device bridge1 entered promiscuous mode [ 485.383890][ T9736] 8021q: adding VLAN 0 to HW filter on device team0 [ 485.399906][ T9736] bridge0: port 3(team0) entered blocking state [ 485.406630][ T9736] bridge0: port 3(team0) entered disabled state [ 494.252718][ T4620] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 496.987621][ C0] net_ratelimit: 10 callbacks suppressed [ 496.987640][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 497.000198][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 497.454716][ T9881] loop6: detected capacity change from 0 to 1764 [ 499.083109][ T9881] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 500.911885][ T9915] netlink: 'syz.4.1437': attribute type 1 has an invalid length. [ 501.231047][ T9915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.689001][T10057] loop6: detected capacity change from 0 to 32768 [ 513.306360][T10057] XFS (loop6): Mounting V5 Filesystem [ 514.331396][T10057] XFS (loop6): Ending clean mount [ 514.415893][T10057] XFS (loop6): Quotacheck needed: Please wait. [ 516.252311][T10057] XFS (loop6): Quotacheck: Done. [ 516.278758][ T7088] XFS (loop6): Unmounting Filesystem [ 522.147241][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 522.153581][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 522.425716][ T26] audit: type=1326 audit(1777046159.234:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10170 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868fec9dd9 code=0x7ffc0000 [ 523.340478][ T26] audit: type=1326 audit(1777046159.234:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10170 comm="syz.1.1498" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f868fec9dd9 code=0x7ffc0000 [ 523.398509][ T26] audit: type=1326 audit(1777046159.263:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10172 comm="syz.4.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f8b5ddd9 code=0x7ffc0000 [ 523.455261][ T26] audit: type=1326 audit(1777046159.263:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10172 comm="syz.4.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f8b5ddd9 code=0x7ffc0000 [ 523.508949][ T26] audit: type=1326 audit(1777046159.263:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10172 comm="syz.4.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f8b5ddd9 code=0x7ffc0000 [ 523.564062][ T26] audit: type=1326 audit(1777046159.263:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10172 comm="syz.4.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f8b5ddd9 code=0x7ffc0000 [ 523.598716][ T26] audit: type=1326 audit(1777046159.263:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10172 comm="syz.4.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f44f8b5ddd9 code=0x7ffc0000 [ 523.634462][ T26] audit: type=1326 audit(1777046159.263:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10172 comm="syz.4.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f8b5ddd9 code=0x7ffc0000 [ 523.657287][ T26] audit: type=1326 audit(1777046159.263:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10172 comm="syz.4.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f8b5ddd9 code=0x7ffc0000 [ 523.741475][ T26] audit: type=1326 audit(1777046159.272:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10172 comm="syz.4.1499" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44f8b5ddd9 code=0x7ffc0000 [ 531.652724][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1531'. [ 533.570804][T10271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1531'. [ 534.036307][T10291] ================================================================== [ 534.045071][T10291] BUG: KASAN: use-after-free in ieee80211_monitor_select_queue+0x23a/0x240 [ 534.053681][T10291] Read of size 2 at addr ffff88805fc569fb by task syz.2.1535/10291 [ 534.061577][T10291] [ 534.063926][T10291] CPU: 1 PID: 10291 Comm: syz.2.1535 Not tainted syzkaller #0 [ 534.071489][T10291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 534.081577][T10291] Call Trace: [ 534.084883][T10291] [ 534.087816][T10291] dump_stack_lvl+0x188/0x250 [ 534.092506][T10291] ? show_regs_print_info+0x20/0x20 [ 534.097714][T10291] ? load_image+0x400/0x400 [ 534.102224][T10291] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 534.107700][T10291] print_address_description+0x60/0x2d0 [ 534.113256][T10291] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 534.119600][T10291] kasan_report+0xdf/0x130 [ 534.124029][T10291] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 534.130287][T10291] ieee80211_monitor_select_queue+0x23a/0x240 [ 534.136479][T10291] ? ieee80211_recalc_smps_work+0x20/0x20 [ 534.142472][T10291] netdev_core_pick_tx+0x118/0x2e0 [ 534.147786][T10291] __dev_queue_xmit+0x756/0x2f80 [ 534.152936][T10291] ? dev_queue_xmit+0x20/0x20 [ 534.157733][T10291] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 534.163380][T10291] ? lockdep_hardirqs_on+0x94/0x140 [ 534.168606][T10291] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 534.174615][T10291] ? dev_queue_xmit+0x9/0x20 [ 534.179412][T10291] ? __dev_queue_xmit+0x6/0x2f80 [ 534.184360][T10291] packet_sendmsg+0x3dba/0x5060 [ 534.189353][T10291] ? __might_sleep+0xf0/0xf0 [ 534.194141][T10291] ? aa_sk_perm+0x7dc/0x910 [ 534.198652][T10291] ? packet_getsockopt+0x9a0/0x9a0 [ 534.203788][T10291] ? aa_sock_msg_perm+0x94/0x150 [ 534.208734][T10291] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 534.214026][T10291] ? security_socket_sendmsg+0x7c/0xa0 [ 534.219501][T10291] ? packet_getsockopt+0x9a0/0x9a0 [ 534.224633][T10291] ____sys_sendmsg+0x5b7/0x8f0 [ 534.229440][T10291] ? __sys_sendmsg_sock+0x30/0x30 [ 534.234481][T10291] ? import_iovec+0x6f/0xa0 [ 534.239002][T10291] ___sys_sendmsg+0x236/0x2e0 [ 534.243701][T10291] ? __sys_sendmsg+0x2a0/0x2a0 [ 534.248524][T10291] __se_sys_sendmsg+0x1af/0x290 [ 534.253405][T10291] ? __x64_sys_sendmsg+0x80/0x80 [ 534.258359][T10291] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 534.264371][T10291] ? lockdep_hardirqs_on+0x94/0x140 [ 534.269610][T10291] do_syscall_64+0x4c/0xa0 [ 534.274040][T10291] ? clear_bhb_loop+0x30/0x80 [ 534.278819][T10291] ? clear_bhb_loop+0x30/0x80 [ 534.283509][T10291] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 534.289488][T10291] RIP: 0033:0x7fa15d09cdd9 [ 534.293925][T10291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 534.313543][T10291] RSP: 002b:00007fa15b2d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 534.321992][T10291] RAX: ffffffffffffffda RBX: 00007fa15d316090 RCX: 00007fa15d09cdd9 [ 534.330342][T10291] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 534.338512][T10291] RBP: 00007fa15d132d69 R08: 0000000000000000 R09: 0000000000000000 [ 534.346589][T10291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 534.354652][T10291] R13: 00007fa15d316128 R14: 00007fa15d316090 R15: 00007ffd6545b498 [ 534.362816][T10291] [ 534.365835][T10291] [ 534.368146][T10291] Allocated by task 9621: [ 534.372463][T10291] __kasan_kmalloc+0xb5/0xf0 [ 534.377045][T10291] __alloc_skb+0x22c/0x750 [ 534.381453][T10291] alloc_skb_with_frags+0xa7/0x730 [ 534.386551][T10291] sock_alloc_send_pskb+0x87f/0x9a0 [ 534.391742][T10291] __ip_append_data+0x2037/0x32d0 [ 534.396752][T10291] ip_make_skb+0x227/0x440 [ 534.401152][T10291] udp_sendmsg+0x1ab5/0x2370 [ 534.405723][T10291] ____sys_sendmsg+0x5b7/0x8f0 [ 534.410483][T10291] ___sys_sendmsg+0x236/0x2e0 [ 534.415159][T10291] __sys_sendmmsg+0x2ba/0x500 [ 534.419829][T10291] __x64_sys_sendmmsg+0x9c/0xb0 [ 534.424668][T10291] do_syscall_64+0x4c/0xa0 [ 534.429071][T10291] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 534.434955][T10291] [ 534.437260][T10291] Last potentially related work creation: [ 534.442962][T10291] kasan_save_stack+0x35/0x60 [ 534.447635][T10291] kasan_record_aux_stack+0xb8/0x100 [ 534.452911][T10291] call_rcu+0x189/0x950 [ 534.457053][T10291] __ip6_del_rt+0xf1/0x150 [ 534.461452][T10291] ip6_del_rt+0xbe/0x110 [ 534.465680][T10291] __ipv6_ifa_notify+0x874/0xe60 [ 534.470603][T10291] addrconf_ifdown+0xdff/0x19c0 [ 534.475438][T10291] addrconf_notify+0x445/0xf00 [ 534.480187][T10291] raw_notifier_call_chain+0xcb/0x160 [ 534.485551][T10291] dev_close_many+0x29f/0x400 [ 534.490209][T10291] unregister_netdevice_many+0x481/0x19f0 [ 534.495914][T10291] ip6gre_exit_batch_net+0x44d/0x4a0 [ 534.501182][T10291] cleanup_net+0x791/0xba0 [ 534.505603][T10291] process_one_work+0x85f/0x1010 [ 534.510527][T10291] worker_thread+0xaa6/0x1290 [ 534.515192][T10291] kthread+0x436/0x520 [ 534.519254][T10291] ret_from_fork+0x1f/0x30 [ 534.523673][T10291] [ 534.525981][T10291] The buggy address belongs to the object at ffff88805fc56800 [ 534.525981][T10291] which belongs to the cache kmalloc-512 of size 512 [ 534.540537][T10291] The buggy address is located 507 bytes inside of [ 534.540537][T10291] 512-byte region [ffff88805fc56800, ffff88805fc56a00) [ 534.553803][T10291] The buggy address belongs to the page: [ 534.559525][T10291] page:ffffea00017f1500 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805fc54800 pfn:0x5fc54 [ 534.571106][T10291] head:ffffea00017f1500 order:2 compound_mapcount:0 compound_pincount:0 [ 534.579479][T10291] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 534.587472][T10291] raw: 00fff00000010200 ffffea0001831708 ffffea0001810608 ffff888016c41c80 [ 534.596044][T10291] raw: ffff88805fc54800 0000000000100003 00000001ffffffff 0000000000000000 [ 534.604621][T10291] page dumped because: kasan: bad access detected [ 534.611026][T10291] page_owner tracks the page as allocated [ 534.616723][T10291] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4230, ts 50640709362, free_ts 11992518223 [ 534.635811][T10291] get_page_from_freelist+0x1bbd/0x1ca0 [ 534.641355][T10291] __alloc_pages+0x1ee/0x480 [ 534.645931][T10291] new_slab+0xc0/0x4b0 [ 534.649985][T10291] ___slab_alloc+0x80a/0xdd0 [ 534.654563][T10291] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 534.659936][T10291] __ipv6_dev_mc_inc+0x3fa/0xa90 [ 534.664859][T10291] addrconf_dad_work+0x3d1/0x1540 [ 534.669869][T10291] process_one_work+0x85f/0x1010 [ 534.674791][T10291] worker_thread+0xaa6/0x1290 [ 534.679455][T10291] kthread+0x436/0x520 [ 534.683505][T10291] ret_from_fork+0x1f/0x30 [ 534.688000][T10291] page last free stack trace: [ 534.692650][T10291] free_unref_page_prepare+0x637/0x6c0 [ 534.698108][T10291] free_unref_page+0x8f/0x2a0 [ 534.702808][T10291] free_contig_range+0x96/0xf0 [ 534.707589][T10291] destroy_args+0xf0/0xa00 [ 534.712003][T10291] debug_vm_pgtable+0x321/0x380 [ 534.716843][T10291] do_one_initcall+0x272/0x730 [ 534.721596][T10291] do_initcall_level+0x137/0x1f0 [ 534.726520][T10291] do_initcalls+0x4b/0x90 [ 534.730839][T10291] kernel_init_freeable+0x3e9/0x570 [ 534.736030][T10291] kernel_init+0x19/0x1b0 [ 534.740353][T10291] ret_from_fork+0x1f/0x30 [ 534.744759][T10291] [ 534.747077][T10291] Memory state around the buggy address: [ 534.752697][T10291] ffff88805fc56880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 534.760742][T10291] ffff88805fc56900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 534.768787][T10291] >ffff88805fc56980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 534.776837][T10291] ^ [ 534.784795][T10291] ffff88805fc56a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 534.792838][T10291] ffff88805fc56a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 534.800879][T10291] ================================================================== [ 534.808918][T10291] Disabling lock debugging due to kernel taint [ 534.815158][T10291] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 534.822360][T10291] CPU: 1 PID: 10291 Comm: syz.2.1535 Tainted: G B syzkaller #0 [ 534.831211][T10291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 534.841270][T10291] Call Trace: [ 534.844553][T10291] [ 534.847524][T10291] dump_stack_lvl+0x188/0x250 [ 534.852317][T10291] ? show_regs_print_info+0x20/0x20 [ 534.857525][T10291] ? load_image+0x400/0x400 [ 534.862042][T10291] panic+0x2e5/0x810 [ 534.865965][T10291] ? bpf_jit_dump+0xd0/0xd0 [ 534.870478][T10291] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 534.876375][T10291] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 534.882279][T10291] ? _raw_spin_unlock+0x40/0x40 [ 534.887141][T10291] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 534.893396][T10291] check_panic_on_warn+0x80/0xa0 [ 534.898407][T10291] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 534.904664][T10291] end_report+0x6d/0xf0 [ 534.908830][T10291] kasan_report+0x102/0x130 [ 534.913346][T10291] ? ieee80211_monitor_select_queue+0x23a/0x240 [ 534.919608][T10291] ieee80211_monitor_select_queue+0x23a/0x240 [ 534.925695][T10291] ? ieee80211_recalc_smps_work+0x20/0x20 [ 534.931433][T10291] netdev_core_pick_tx+0x118/0x2e0 [ 534.936559][T10291] __dev_queue_xmit+0x756/0x2f80 [ 534.941527][T10291] ? dev_queue_xmit+0x20/0x20 [ 534.946219][T10291] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 534.951865][T10291] ? lockdep_hardirqs_on+0x94/0x140 [ 534.957169][T10291] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 534.962823][T10291] ? dev_queue_xmit+0x9/0x20 [ 534.967527][T10291] ? __dev_queue_xmit+0x6/0x2f80 [ 534.972496][T10291] packet_sendmsg+0x3dba/0x5060 [ 534.977373][T10291] ? __might_sleep+0xf0/0xf0 [ 534.981983][T10291] ? aa_sk_perm+0x7dc/0x910 [ 534.986494][T10291] ? packet_getsockopt+0x9a0/0x9a0 [ 534.991619][T10291] ? aa_sock_msg_perm+0x94/0x150 [ 534.996570][T10291] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 535.001876][T10291] ? security_socket_sendmsg+0x7c/0xa0 [ 535.007351][T10291] ? packet_getsockopt+0x9a0/0x9a0 [ 535.012485][T10291] ____sys_sendmsg+0x5b7/0x8f0 [ 535.017309][T10291] ? __sys_sendmsg_sock+0x30/0x30 [ 535.022410][T10291] ? import_iovec+0x6f/0xa0 [ 535.027017][T10291] ___sys_sendmsg+0x236/0x2e0 [ 535.031709][T10291] ? __sys_sendmsg+0x2a0/0x2a0 [ 535.036495][T10291] __se_sys_sendmsg+0x1af/0x290 [ 535.041359][T10291] ? __x64_sys_sendmsg+0x80/0x80 [ 535.046322][T10291] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 535.052326][T10291] ? lockdep_hardirqs_on+0x94/0x140 [ 535.057555][T10291] do_syscall_64+0x4c/0xa0 [ 535.061991][T10291] ? clear_bhb_loop+0x30/0x80 [ 535.066687][T10291] ? clear_bhb_loop+0x30/0x80 [ 535.071415][T10291] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 535.077410][T10291] RIP: 0033:0x7fa15d09cdd9 [ 535.081970][T10291] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 535.101585][T10291] RSP: 002b:00007fa15b2d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 535.110017][T10291] RAX: ffffffffffffffda RBX: 00007fa15d316090 RCX: 00007fa15d09cdd9 [ 535.118001][T10291] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 535.125976][T10291] RBP: 00007fa15d132d69 R08: 0000000000000000 R09: 0000000000000000 [ 535.133952][T10291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.142016][T10291] R13: 00007fa15d316128 R14: 00007fa15d316090 R15: 00007ffd6545b498 [ 535.149998][T10291] [ 535.153540][T10291] Kernel Offset: disabled [ 535.157860][T10291] Rebooting in 86400 seconds..